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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates, etc. 
z the third digit is incremented when editorial only changes have been incorporated in the document. 



£75/ 



3GPP TS 44.31 8 version 6.1 .0 Release 6 1 3 ETSI TS 1 44 31 8 V6.1 .0 (2005-07) 



Scope 
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3.1 



Definitions, symbols and abbreviations 



Definitions 



For the purposes of the present document, the terms and definitions in 3GPP TS 43.218 and the following apply. 

Access Point ID: The AP-ID is the MAC address of the unlicensed mode access point through which the MS is 
accessing GAN service. This identifier is provided by the MS (obtained via broadcast from the AP) to the GANC via 
the Up interface, when it requests GAN service. The AP-ID may be used by the GANC to support location services. 
The AP-ID may also be used by the service provider to restrict GAN service access via only authorized APs. 

3.2 Symbols 

For the purposes of the present document, the following symbols apply: 

Wm Reference point between a Security Gateway and a 3GPP AAA Server or 3GPP AAA proxy. 



3.3 



Abbreviations 



For the purposes of the present document, the following abbreviations apply: 

AAA Authentication, Authorization and Accounting 

AKA Authentication and Key Agreement 

AP Access Point 

BSC Base Station Controller 

BSS Base Station Subsystem 

BSSGP Base Station System GPRS Protocol 

BSSMAP Base Station System Management Application Part 

BTS Base Transceiver Station 

CBS Cell Broadcast Service 

CC Call Control 

CGI Cell Global Identification 

CM Connection Management 

CN Core Network 

CPE Customer Premises Equipment 

CS Circuit Switched 

CSD Circuit Switched Data 

CTM Cellular Text Telephone Modem 

DNS Domain Name System 

DTM Dual Transfer Mode 

EAP Extensible Authentication Protocol 

ETSI European Telecommunications Standards Institute 

FCC US Federal Communications Commission 

FEC Forward Error Correction 

FQDN Fully Qualified Domain Name 

GA Generic Access 
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GAN Generic Access Network 

GANG Generic Access Network Controller 

GA-RC Generic Access Resource Control 

GA-CSR Generic Access Circuit Switched Resources 

GA-PSR Generic Access Packet Switched Resources 

GERAN GSM EDGE Radio Access Network 

GGSN Gateway GPRS Support Node 

GMM/SM GPRS Mobility Management and Session Management 

GPRS General Packet Radio Service 

GSM Global System for Mobile communications 

GSN GPRS Support Node 

HLR Home Location Register 

HPLMN Home PLMN 

IETF Internet Engineering Task Force 

IMEISV International Mobile Station Equipment Identity and Software Version Number 

IMSI International Mobile Subscriber Identity 

IP Internet Protocol 

ISP Internet Service Provider 

LA Location Area 

LAI Location Area Identity 

LLC Logical Link Control 

MAC Medium Access Control 

MAC Message Authentication Code 

MM Mobility Management 

MS Mobile Station 

MSC Mobile Switching Center 

MSRN Mobile Station Roaming Number 

MTPl Message Transfer Part Layer 1 

MTP2 Message Transfer Part Layer 2 

MTP3 Message Transfer Part Layer 3 

NAS Non- Access Stratum 

NSS Network Subsystem 

PDP Packet Data Protocol 

PDU Protocol Data Unit 

PLMN Public Land Mobile Network 

PSAP Public Safety Answering Point 

PSTN Public Switched Telephone Network 

P-TMSI Packet TMSI 

QoS Quality of Service 

RA Routing Area 

RAC Routing Area Code 

RAI Routing Area Identity 

RAT Radio Access Technology 

RLC Radio Link Control 

RTCP Real Time Control Protocol 

RTP Real Time Protocol 

SCCP Signalling Connection Control Part 

SGSN Serving GPRS Support Node 

SEGW Security Gateway 

SMS Short Message Service 

SNDCP Sub-Network Dependent Convergence Protocol 

TBF Temporary Block Flow 

TC Transport Channel 

TCP Transmission Control Protocol 

TFO Tandem Free Operation 

TMSI Temporary Mobile Subscriber Identity 

TrFO Transcoder Free Operation 

TTY Text telephone or teletypewriter 

UDP User Datagram Protocol 

UMTS Universal Mobile Telecommunication System 

UTRAN Universal Terrestrial Radio Access Networks 

VLR Visited Location Register 
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4 Elementary procedures for handling of secure 

connection 

4.1 General 

All traffic over the Up interface shall be sent through the IPsec tunnel that is established as a result of the authentication 
procedure. 

4.2 Establishment of the secure connection 

4.2.1 General 

The MS and GANC-SEGW shall set up one IKE Secure Association (SA) and one CHILD_SA for IPsec ESP according 
to the profiles defined in [37]. The MS shall act as initiator, and the GANC-SEGW as responder. For MS with SIM 
only, the MS and GANC-SEGW shall use EAP-SIM for mutual authentication of the MS and the core network 
according to sub-clause 4.3. For MS with USIM, the MS and GANC-SEGW shall use EAP-AKA for mutual 
authentication of the MS and the core network according to sub-clause 4.4. 

The MS shall use certificates for authentication of the GANC-SEGW according to sub-clause 4.2.5. 

Furthermore, the MS shall: 

use Configuration Payload according to [27] to acquire/renew an internal IP address in the network protected by 
the GANC-SEGW 

act as initiator in the Traffic Selector (TS) negotiation. The MS shall use the following value for the traffic 
selector-initiator and traffic selector-responder payloads: 

TSi = (0, 0-65536, 0.0.0.0-255.255.255.255) 

TSr= (0, 0-65536, 0.0.0.0-255.255.255.255) 

The GANC-SEGW shall use the following value for the traffic selector-initiator and traffic selector-responder payloads: 

TSi = (0, 0-65536, ms_internal_address - ms_internal_address), where ms_internal_address is the IP 
address in the network protected by the GANC-SEGW that is assigned to the MS 

TSr= (0, 0-65536, 0.0.0.0-255.255.255.255) 

Either the MS or GANC-SEGW may initiate re-keying of the SA based on their individual lifetime policy on the S A. 

4.2.2 Identities 

The MS shall send its EAP-SIM or EAP-AKA identity (composed according to sub-clauses 4.3.2 and 4.4.2) as initiator 
identity IDi. 

The GANC-SEGW shall provide the GANC-SEGW identity in the Identity Payload (IDr) as following: 

Identity Type = 2 (ID_FQDN) or 1 (ID_IPV4_ADDR) or 5 (ID_IPV6_ADDR) 

Identity Data = GANC-SEGW FQDN or IPv4 address or IPv6 address, respectively 

Identity Type shall match the Type of the SubjectAltName contained in the GANC-SEGW certificate as well as what 
was provisioned in the MS for Provisioning GANC-SEGW or provided in GA-RC DISCOVERY ACCEPT for Default 
GANC-SEGW or GA-RC REGISTER REDIRECT for Serving GANC-SEGW. 
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4.2.3 Crypto negotiation 

The MS and GANC-SEGW negotiate the cryptographic suite to use for the SA, as per [27]. 

The MS shall include all the algorithms for integrity and confidentiality (defined in the profile for IPsec ESP in [37]) 
that it supports in the proposal. The GANC-SEGW signals back the selected algorithms that will be used for 
confidentiality and integrity protection, based on core network policy. 

4.2.4 NAT traversal 

The MS and GANC-SEGW shall use the IKEv2 mechanisms for detection of NAT, NAT traversal and keep-alive. 

4.2.5 Certificate Handling and Authentication 

As the MS and GANC-SEGW use EAP-SIM or EAP-AKA for mutual authentication, IKEv2 mandates that this is used 
in conjunction with a public key signature based authentication of the GANC-SEGW to the MS. 

The MS requirements for certificate authentication and handling are listed in 3GPP TS 33.234 [10]. 

In addition to the requirements listed in 3GPP TS 33.234 [10], the MS shall: 

match the SubjectAltName in the end entity certificate with the IDr payload, and with GANC-SEGW identity 
obtained from provisioning, discovery or register redirect. 

- If the MS was provisioned with an IP address of the GANC-SEGW, (or received it in the GA-RC DISCOVERY 
ACCEPT OR GA-RC REGISTER REDIRECT message), then the certificate shall contain an IPaddress 
SubjectAltName that matches that address. The MS may include an ID_IPV4_ADDRESS or ID_IPv6_ADDR 
IDr payload in IKE_SA_AUTH Request (message 3). 

- If the MS was provisioned with an FQDN of the GANC-SEGW, or received it in the GA-RC DISCOVERY 
ACCEPT OR GA-RC REGISTER REDIRECT message, then the certificate shall contain a DNSname 
SubjectAltName that matches that FQDN. The MS may include an ID_FQDN IDr payload in IKE_SA_AUTH 
Request (message 3). 

If a single SubjectAltName extension contains several IPaddress or DNSname components, at least one of them 
shall match the expected value. 

4.2.6 Abnormal cases 

If the MS and GANC-SEGW are not able to set up the SA for any other reason than EAP-SIM or EAP-AKA 
authentication failure, and the current GANC-SEGW is the SEGW associated to the Default GANC or a Serving 
GANC, the MS shall act as if a "Lower layer failure in the MS" has occurred and act as defined in sub-clause 6.2.4.2. 

If the MS and GANC-SEGW are not able to set up the SA for any other reason than EAP-SIM or EAP-AKA 
authentication failure, and the current GANC-SEGW is the SEGW associated to the Provisioning GANC, the MS shall 
act as if a "Lower layer failure in the MS" has occurred and act as defined in sub-clause 5.6.2. 

4.3 EAP-SIM authentication 
4.3.1 General 

After the initial IKEv2 exchanges, EAP-SIM authentication is invoked by deferring the sending of the AUTH payload, 
as per [27]. 

The GANC-SEGW shall: 

communicate with the local AAA server over the Wm interface, and relay traffic between the local AAA server 
and MS 

compose an EAP Response/Identity message containing the IDi of the MS and send this message to the AAA 
server. This will trigger the EAP-SIM authentication procedure. 
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After the MS has received the EAP Success message, the MS and GANC-SEGW complete the setup of the SA. 



4.3.2 EAP-SIM Identity 



The MS sends its identity as part of the initial IKE exchanges, and this also serves as identify for the EAP-SIM 
exchange. The identity is composed compliant with the Network Access Identifier (NAI) format specified in [42]. The 
format of NAI is username ©realm [3]. The MS shall compose the NAI according to the following format and as 
defined in sub-clause 12.2.2: "l<IMSI>@gan.mnc<MNC>.mcc<MCC>. 3gppnetwork.org". 

For example, for EAP-SIM authentication: If the IMSI is 234150999999999 (MCC = 234, MNC = 15), the NAI then 
takes the form 1234150999999999@gan.mnc015.mcc234.3gppnetwork.org. 

For the fast re-authentication identity, the format is also compliant with NAI. The MS shall compose this according to 
the following format: re-authid ©realm, where "re-authid" is replaced with the re-authentication ID received during the 
previous EAP-SIM authentication procedure. The 're-authid shall take the form of a NAI username as specified in [42]. 
The realm shall be the same realm as used as identity of the MS for the EAP-SIM full authentication procedure. 

4.3.3 EAP-SIM Fast Re-authentication 

The MS may use the re-authentication identity that was provided during the previous EAP-SIM authentication 
procedure to authenticate using EAP-SIM fast re-authentication instead of the full authentication procedure. The MS 
shall use the realm part provided by the EAP-SIM server as part of the fast re-authentication identity, as specified in 

[23]. 

The MS may attempt to use the fast re-authentication procedure when it has an unused re-authentication identity 
available. The MS shall not use one re-authentication identity more than once. The fast re-authentication procedure 
shall not be used for the first authentication after the MS has powered up, in that case it shall use the full authentication 
procedure. 

4.3.4 Abnormal cases 

If the EAP-SIM authentication procedure fails, and the current GANC-SEGW is the SEGW associated to the Default 
GANG or a Serving GANG fails, the MS shall act as if it had received GA-RC REGISTER REJECT with the Reject 
Cause value IMSI not allowed' as defined in sub-clause 6.2.3.3. 

If the EAP-SIM authentication procedure fails, and the current GANC-SEGW is the SEGW associated to the 
Provisioning GANG, the MS shall act as if it had received GA-RC DISCOVERY REJECT with the Reject Cause value 
IMSI not allowed' as defined in sub-clause 5.5.2. 

4.4 EAP-AKA authentication 
4.4.1 General 

After the initial IKEv2 exchanges, EAP-AKA authentication is invoked by deferring the sending of the AUTH payload, 
as per [27]. 

The GANC-SEGW shall: 

communicate with the local AAA server over the Wm interface, and relay traffic between the local AAA server 
and MS, and, 

compose an EAP Response/Identity message containing the IDi of the MS and send this message to the AAA 
server. This will trigger the EAP-AKA authentication procedure 

After the MS has received the EAP Success message, the MS and GANC-SEGW complete the setup of the SA. 



4.4.2 EAP-AKA Identity 



The MS sends its identity as part of the initial IKE exchanges, and this also serves as identify for the EAP-AKA 
exchange. The identity is composed compliant with the Network Access Identifier (NAI) format specified in [42]. The 
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format of NAI is username@realm [3]. The MS shall compose the NAI according to the following format and as 
defined in sub-clause 12.2.2: "0<IMSI>@gan.mnc<MNC>.mcc<MCC>. 3gppnetwork.org". 

For example, for EAP-AKA authentication: If the IMSI is 234150999999999 (MCC = 234, MNC = 15), the NAI then 
takes the form: 0234150999999999@gan.mnc015.mcc234.3gppnetwork.org 

For the fast re-authentication identity, the format is also compliant with NAI. The MS shall compose this according to 
the following format: re-authid ©realm, where "re-authid" is replaced with the re-authentication ID received during the 
previous EAP-AKA authentication procedure. The 're-authid shall take the form of a NAI usemame as specified in 
[42]. The realm shall be the same realm as used as identity of the MS for the EAP-AKA full authentication procedure. 

4.4.3 EAP-AKA Fast Re-authentication 

The MS may use the re-authentication identity that was provided during the previous EAP-AKA authentication 
procedure to authenticate using EAP-AKA fast re-authentication instead of the full authentication procedure. The MS 
shall use the realm part provided by the EAP-AKA server as part of the fast re-authentication identity, as specified in 
[41]. 

The MS may attempt to use the fast re-authentication procedure when it has an unused re-authentication identity 
available. The MS shall not use one re-authentication identity more than once. The fast re-authentication procedure 
shall not be used for the first authentication after the MS has powered up, in that case it shall use the full authentication 
procedure. 

4.4.4 Abnormal cases 

If the EAP-AKA authentication procedure fails, and the current GANC-SEGW is the SEGW associated to the Default 
GANG or a Serving GANG fails, the MS shall act as if it had received GA-RC REGISTER REJECT with the Reject 
Cause value IMSI not allowed' as defined in sub-clause 6.2.3.3. 

If the EAP-AKA authentication procedure fails, and the current GANC-SEGW is the SEGW associated to the 
Provisioning GANG, the MS shall act as if it had received GA-RC DISCOVERY REJECT with the Reject Cause value 
IMSI not allowed' as defined in sub-clause 5.5.2. 

4.5 Release of the secure connection 

The SA is closed according the procedures defined in [27]. 



Elementary procedures for GANG Discovery 



5.1 Purpose of the Discovery Procedure 

The purpose of the Discovery procedure is to allow the network to allocate a Default GANG to a MS. This allocation 
consists of the IP address or FQDN of the Default GANC-SEGW, and the IP address or FQDN and TCP port of the 
Default GANG to be used for the Registration procedure. As long as the Default GANG is available in the network the 
MS shall not perform Discovery procedure again. 

5.2 Discovery procedure 

The Discovery procedure is performed between the MS and the Provisioning GANG. The Discovery procedure is 
initiated by the MS in order to receive information about the Default GANG to be used for future instances of the 
Registration Procedure. 



£75/ 



3GPP TS 44.318 version 6.1.0 Release 6 



21 



ETSI TS 144 318 V6.1.0 (2005-07) 



MS 



Start TU3901 
Stop TU3901 
Stop TU3901 



GA RC DISCOVERY REQUEST 



GA-RC DISCOVERY ACCEPT 



GA-RC DISCOVERY REJECT 



GANC 



Figure 5.2: Discovery procedure 

5.3 Discovery Request initiation by tine MS 

This procedure shall be triggered after the MS has gained IP connectivity and the MS has either no stored information 
about a Default GANC or if the previous Registration procedure towards the Default GANC was unsuccessful. 

The MS may initially be provisioned with information about the Provisioning GANC and the SEGW related to that 
GANC. The provisioning of this information in the MS is out of the scope of this document. This information can be in 
the format of either a FQDN or an IP-address or any combination of these. 

The MS shall: 

If the MS holds an IP address of the Provisioning SEGW, the MS establishes the secure connection towards the 
Provisioning SEGW according to sub-clause 4.2 

- If the MS holds a FQDN of the Provisioning SEGW, the MS performs a public DNS query to retrieve the IP- 
address of the Provisioning SEGW and establish the secure connection towards the Provisioning SEGW 
according to sub-clause 4.2. The MS shall not store the IP address retrieved from DNS for subsequent 
procedures (apart from DNS resolver caching). 

In case the MS is not provisioned with information about the Provisioning SEGW, derive a FQDN of the 
Provisioning SEGW from the IMSI in the following format: 

- psegw.gan.mnc<MA^C>.mcc<MCC>. 3gppnetwork.org; 

Convert the leading digits of the IMSI, i.e. MNC and MCC, into a domain name, as described in sub- 
clause 12.2.2; and 

- perform a public DNS Query to retrieve the IP-address of the Provisioning SEGW and establish the 
secure connection towards the Provisioning SEGW according to sub-clause 4.2. The MS shall not store 
the IP address retrieved from DNS for subsequent procedures (apart from DNS resolver caching). 

Following successful establishment of secure connection to the Provisioning SEGW: 

If the MS holds an IP address of the Provisioning GANC, the MS shall establish a TCP connection to the 
Provisioning GANC using the well-known TCP port for Discovery as defined in sub-clause 12.2.1 

- If the MS holds a FQDN of the Provisioning GANC, the MS shall perform a DNS query "inside the 
secure connection" to retrieve the IP-address of the Provisioning GANC. The MS shall establish a TCP 
connection to the Provisioning GANC using this IP address and a TCP port defined for Discovery (see 
sub-clause 12.2.1). The MS shall not store the IP address retrieved from DNS for subsequent procedures 
(apart from DNS resolver caching). 

In cases where the MS is not provisioned with information about the Provisioning GANC, the MS derives 
a FQDN of the Provisioning GANC from the IMSI in the following format: 

pganc .gan. mnc <MNC> . mcc <MCC> .3gppnetwork.org 
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The conversion of the lead digits of the IMSI, i.e. MNC and MCC, into a domain name is described in 

sub-clause 12.2.2, 

A DNS query is performed "inside the secure connection" to retrieve the IP-address of the Provisioning 
GANG. The MS shall not store the IP address retrieved from DNS for subsequent procedures (apart from 
DNS resolver caching). A TGP connection is then established inside the IPsec tunnel, to the Provisioning 
GANG using the TGP port defined for Discovery procedure (see sub-clause 12.2.1). 

- Establish a single TGP connection to the GANG over the IPsec tunnel 

After successful establishment of TGP connection; 

Discovery Procedure is due to the MS failing to register with a GANG, the MS includes the following 
information elements in the GA-RG DISGOVERY REQUEST message: Register Reject Gause IE, Redirection 
Gounter IE and Default GANG IE, 

- Send a GA-RG DISGOVERY REQUEST message to the Provisioning GANG on the established TGP 
connection 

- When GA-RG layer has submitted the GA-RG DISGOVERY REQUEST message to the TGP layer, it shall start 
timer TU3901 

5.4 Discovery Request processing by tine network 

When receiving the GA-RG DISGOVERY REQUEST message the Provisioning GANG may either accept or reject the 
Discovery request from the MS. 

5.4.1 Discovery accepted 

If the network accepts the Discovery request from the MS, it shall send the GA-RG DISGOVERY AGGEPT message to 
the MS. When the GA-RG layer in the network has submitted the GA-RG DISGOVERY AGGEPT message to the TGP 
layer, it may initiate release of its half of the bidirectional TGP connection. 

The Provisioning GANG may use the Redirect Gounter IE, Register Reject Gause Value IE and Default GANG IE 
received in the GA-RG DISGOVERY REQUEST message to assign a different Default GANG for the MS. 

5.4.2 Discovery rejected 

If the network rejects the Discovery request from the MS, it shall send the GA-RG DISGOVERY REJEGT message to 
the MS. When the GA-RG layer in the network has submitted the GA-RG DISGOVERY REJEGT message to the TGP 
layer and the value of the Discovery Reject Gause IE included in the message was not 'Network Gongestion', it may 
initiate release of its half of the bidirectional TGP connection. 

The Provisioning GANG may use the Redirect Gounter IE, Register Reject Gause Value IE and Default GANG IE 
received in the GA-RG DISGOVERY REQUEST message to detect a problem and reject the MS. 

5.5 Discovery response processing by {he MS 
5.5.1 Discovery accepted 

When the MS receives GA-RG DISGOVERY AGGEPT message, it shall: 

- stop the timer TU3901. 

set the timer value for TU3903 to the default value, 

store the information about Default GANG in persistent storage: 

- The Default GANG information consists of the Default GANG, SEGW associated with the Default 
GANG and optionally a TGP port to be used with that Default GANG. If a specific TGP Port is not 
received in the message, the defined port for Registration is used (see sub-clause 12.2.1) 
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release the TCP connection towards the Provisioning GANC 

if the returned SEGW for Default GANC is the same as the one used for the connection towards the Provisioning 
GANC-SEGW, 

the secure connection can be reused as following; 

If the MS is provisioned with an IP address of the Provisioning GANC-SEGW and received the Default 
GANC-SEGW IP address IE, and these two IP addresses match, the MS shall reuse the secure connection 
or. 

- If the MS is provisioned with a FQDN of the Provisioning GANC-SEGW or derived a FQDN for the 
Provisioning GANC-SEGW and it received Default GANC-SEGW FQDN IE and these two identifiers 
match, the MS shall reuse the secure connection. 

otherwise the MS shall release the secure connection towards SEGW of the Provisioning GANC as defined in 

sub-clause 4.5 

initiate the registration procedure towards the Default GANC as defined in sub-clause 6.2. 

5.5.2 Discovery rejected 

When the MS receives GA-RC DISCOVERY REJECT message it shall: 

- stop the timer TU3901, 

set the timer value for TU3903 to the default value. 

If the value of the Reject Cause IE indicates 'Network Congestion' , the MS shall 

- Maintain the secure connection to the GANC-SEGW and the TCP connection to the GANC 
Create a random value between zero and the received value in TU3902 Timer IE and 

Add this value to the received value in TU3902 Timer IE, this becomes the new value for TU3902 

Start timer TU3902 according to the new calculated value 

If the value of the Reject Cause IE indicates 'IMSI not allowed' or "Unspecified", then the MS shall: 

Release the TCP connection established to the Provisioning GANC, if still established. 

Release the secure connection towards the SEGW associated with the Provisioning GANC as defined in sub- 
clause 4.5. 

- Not initiate a new Discovery procedure until the next power-on. 

5.6 Abnormal cases 

5.6.1 TU3901 expiry 

If timer TU3901 has expired in the MS, the MS shall: 

release the TCP connection towards the Provisioning GANC, 

release the secure connection towards SEGW of the Provisioning GANC as defined in sub-clause 4.5, 

double the current value for timer TU3903 but not exceeding the maximum value defined for this timer as 
defined in sub -clause 12.1.1 and 

- start timer TU3903 



£75/ 



3GPP TS 44.31 8 version 6.1 .0 Release 6 24 ETSI TS 1 44 31 8 V6.1 .0 (2005-07) 

5.6.2 Lower layer failure in the MS 

Lower layer failure in the MS can be for example related to DNS, IPsec or TCP. If any lower layer failure happens in 
the MS, the MS shall: 

release the TCP connection towards the Provisioning GANC, if established, 

release the secure connection towards SEGW of the Provisioning GANC, if established, as defined in sub-clause 
4.5, 

double the current timer value for TU3903 but not exceeding the maximum value defined in sub-clause 12.1.1 
and 

- start timer TU3903. 

5.6.3 TU3902 expiry 

If timer TU3902 has expired in the MS, the MS shall: 

if the TCP connection to the Provisioning GANC is still established: 

- send a GA-RC DISCOVERY REQUEST message and 

- start timer TU3901 

otherwise, restart the Discovery procedure as defined in sub-clause 5.3, when IP connectivity is available. 

5.6.4 TU3903 expiry 

If timer TU3903 has expired in the MS, the MS shall restart the Discovery procedure as defined in sub-clause 5.3. 



Elementary procedures for Registration 



6.1 Purpose of GAN Registration 



The Registration procedure is performed between the MS and the GANC (Default or Serving GANC). The purpose of 
this procedure is to allow the MS to register for GAN services on the most suitable GANC for the network. The MS as 
part of the Registration procedure provides the GANC with information relating to the current connectivity of the MS. 
The GANC as part of a successful Registration provides the MS with the "GSM System Information" message content 
that is applicable in GAN mode. 
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6.2 Registration procedure 



MS 



Start TU3904 
Stop TU3904 
Stop TU3904 
Stop TU3904 



GANG 



GA-RC REGISTER REQUEST 



GA-RC REGISTER ACCEPT 



GA-RC REGISTER REJECT 



GA-RC REGISTER REDIRECT 



Figure 6.2.1 : Registration procedure 

6.2.1 Registration initiation by tine MS 

This procedure shall be triggered by the MS under the following conditions: 

the MS has gained IP connectivity and 

the MS has stored information about a Default GANC. 

The Registration procedure is initiated towards the Default GANC after a successful Discovery procedure or after a 
failed Registration towards a Serving GANC, where no GAN PLMN list was provided to the MS from the Default 
GANC. The Registration procedure is also initiated towards the Default GANC when no more PLMNs can be selected 
from the GAN PLMN List received from the Default GANC. 

As part of the Registration procedure, the MS may receive a list of PLMN identities when trying to register towards the 
Default GANC. This list of PLMN identities is passed to the upper layers. Following PLMN selection in the upper 
layers, if registered the MS shall first deregister from the current Serving GANC as defined in sub-clause 6.4.1, and 
then attempt the registration procedure towards the GANC-SEGW and GANC associated with the selected PLMN. 

This procedure is also triggered towards the Default GANC, if the MS at any time wishes to perform manual PLMN 
selection. If the MS is already successfully registered to a Serving GANC, and a manual PLMN selection is initiated, 
the MS shall first deregister from the current Serving GANC as defined in sub-clause 6.4.1 and then initiate registration 
towards the Default GANC and include an indication that a list of PLMN identities is requested for manual PLMN 
selection. 

GANC information consists of a GANC-SEGW address, a GANC address and a GANC TCP port number. The MS 
shall initiate the Registration procedure towards a Serving GANC if the corresponding GANC information is available 
in the stored Serving GANC table. The stored Serving GANC table in the MS contains address information of the 
successfully registered Serving GANC address information and the corresponding GSM-CGI or UTRAN cell identity, 
if available, or AP-ID, if no GSM-CGI or UTRAN cell identity is available. UTRAN cell identity consists of the 
Location Area Identity (LAI) and Cell Identity (defined in [3GPP TS 25.331]). The Default GANC is in control of 
whether the MS is allowed to store GANC information in the stored Serving GANC table. 

If the MS is in GERAN or UTRAN coverage, it shall check if it has stored Serving GANC information for the current 
GSM CGI in case of GERAN coverage, or UTRAN cell Identity, in case of UTRAN Coverage, or if the MS is not in 
GERAN/UTRAN coverage, it shall check if it has stored Serving GANC information for the current AP-ID 

if found, the MS shall initiate Registration procedure towards the stored Serving GANC 

if not found, the MS shall initiate Registration procedure towards the Default GANC 

The Location Black List contains information about forbidden Locations and is only valid if the MS is in GERAN or 
UTRAN coverage. It can contain Location information on 3 different levels: Country (i.e. MCC), PLMN (i.e. MCC and 
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MNC) and Location Area (i.e. MCC, MNC and LAC). If the MS is in a location identified by an entry in the Location 
Black List, the MS shall not initiate the Registration procedure. The Location Black List shall be deleted upon power 
cycle. 

The AP Black List contains information about denied APs. If the MS is being provided IP connectivity by an AP that is 
on the AP Black List, the MS shall not initiate discovery or registration, until the relevant AP has been removed from 
the AP Black List. The AP Black List shall be deleted upon power cycle. 

To initiate the registration procedure the MS shall: 

If the MS has stored an IP address of the GANC-SEGW, and the MS does not already have an established secure 
connection to this GANC-SEGW, the MS establishes a secure connection towards the GANC-SEGW according 
to sub-clause 4.2, 

- If the MS has stored a FQDN of the GANC-SEGW, the MS performs a pubhc DNS query to retrieve the IP- 
address of the GANC-SEGW, if the MS does not already have an established secure connection to this GANC- 
SEGW, the MS establishes the secure connection towards the GANC-SEGW according to sub-clause 4.2. The 
MS shall not store the IP address retrieved from DNS for subsequent procedures. 

Following successful establishment of secure tunnel: 

- If the MS holds an IP address of the GANC, the MS establishes a TCP connection to the GANC at the stored 
TCP port to be used for Registration with this GANC. If no TCP port has been stored for this GANC, the default 
TCP port (see sub-clause 12.2.1) shall be used. 

- If the MS holds a FQDN of the GANC, the MS performs a DNS query "inside the secure tunnel" to retrieve the 
IP-address of the GANC. The MS establishes a TCP connection to the GANC at the stored TCP port to be used 
for Registration with this GANC. If no TCP port has been stored for this GANC, the default TCP port (see sub- 
clause 12.2.1) shall be used. The MS shall not store the retrieved IP address for subsequent procedures. 

The MS shall only establish a single TCP connection to the GANC over the IPsec tunnel 

After successful estabUshment of TCP connection, the MS sends a GA-RC REGISTER REQUEST message to the 
GANC on the TCP connection, including the following information elements: 

The current geographic location of the MS, if capable; 

AP Location, if available; 

List of required GAN services, if required; 

If a GAN PLMN list was received at the last registration attempt with the Default GANC and no more PLMNs 
can be selected, then the MS includes the received GAN PLMN List information in the GAN PLMN List IE in 
the GA-RC REGISTER REQUEST message. 

Else if the MS failed to register with the Last GANC, then register Reject Cause IE, Redirection Counter IE and 
address information (i.e. IP address or FQDN) of the last GANC and last GANC-SEGW 

- Else if the MS was redirected by the Last GANC: 

- Redirection Counter IE and Last GANC IE 

When GA-RC layer has submitted the GA-RC REGISTER REQUEST message to the TCP layer, it shall start a timer 
TU3904 

6.2.2 Registration processing by tine networl< 
6.2.2.1 General 

When receiving the GA-RC REGISTER REQUEST message the GANC may either accept or reject the Registration 
request from the MS. The GANC may also redirect the MS to another GANC or provide a list of PLMN identities that 
may provide GAN service to the MS. 

The GANC should verify that the binding (IMSI, inner IP address) as received in the GA-RC REGISTER REQUEST is 
the same as the one that the MS used as identity for authentication to the GANC-SEGW. 
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6.2.2.2 Registration accepted 

If the network accepts the Registration request from the MS, it shall send the GA-RC REGISTER ACCEPT message to 
the MS and store information relating to the GAN Service requirements of the mobile station. 

If the Default GANG indicator is included in the GA-RC REGISTER REQUEST message received from the MS, then 
the GANG may include the Serving GANG Table indicator with the value set to "store", to indicate to the MS that the 
MS is allowed to store the GANG information in the stored Serving GANG table. 

6.2.2.3 Registration redirected 

If the network decides to redirect the MS to another GANG, the network shall send the GA-RG REGISTER 
REDIRECT message to the MS and act as following: 

- If the Default GANG indicator in the GA-RC REGISTER REQUEST message indicates that the GANG is the 
Default GANG for the MS and the MS is being redirected to a Serving GANG, the GANG shall not include the 
GAN PLMN List information element. 

- If the Default GANG indicator in the GA-RC REGISTER REQUEST message indicates that the GANG is the 
Default GANG for the MS, and based on the current MS location and operator policies, the MS needs to perform 
PLMN selection, the GANG shall include the GAN PLMN List information element. 

- If the Default GANG indicator in the GA-RC REGISTER REQUEST message indicates that the GANG is the 
Default GANG for the MS and that the MS is in manual PLMN selection mode and requests a list of PLMNs, the 
GANG shall include the GAN PLMN List information element. 

- If the Default GANG indicator in the GA-RC REGISTER REQUEST message indicates that the GANG is a 
Serving GANG for the MS, the GANG shall not include the GAN PLMN List information. 

When the GA-RC layer in the network has submitted the GA-RC REGISTER REDIRECT message to the TCP layer, it 
may initiate release of its half of the bidirectional TCP connection. 

The GANG can send this message at any time, but it shall not be sent to an MS in GA-CSR-DEDICATED state. 

The GANG may use the Redirect Counter IE, Register Failure Cause IE, Register Reject Cause Value IE and Last 
GANG IE to detect a problem and redirect the MS to a different Serving GANG. 

If the Default GANG indicator is included in the GA-RC REGISTER REQUEST message received from the MS, then 
the GANG may include the Serving GANC Table indicator with the value set to "store", to indicate to the MS that the 
MS is allowed to store the GANC information in the stored Serving GANC table. 

6.2.2.4 Registration rejected 

If the network decides to reject the registration from the MS, the network shall send the GA-RC REGISTER REJECT 
message to the MS. When the GA-RC layer in the network has submitted the GA-RC REGISTER REJECT message to 
the TCP layer and the value of the Register Reject Cause IE included in the message was not 'Network Congestion', it 
may initiate release of its half of the bidirectional TCP connection. 

The GANC may use the Redirect Counter IE, Register Failure Cause IE, Register Reject Cause Value IE and Last 
GANC IE to detect a problem and reject the MS. 

6.2.3 Registration response processing by the MS 
6.2.3.1 Registration accepted 

When the MS receives GA-RC REGISTER ACCEPT message, it shall: 

- stop the timer TU3904, 
reset the Redirection Counter, 

retrieve the GAN System Information parameters and: 
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- send the contents of GAN Cell Description IE to the GSM RR layer or UTRAN RRC to be used for 
Measurement Reports in GSM RR dedicated mode or UTRAN RRC connected mode, if received 

send the following information to the upper layers, if GA-RC is the serving layer: 

from GAN Control Channel Description IE 
Network Mode of Operation, 
GPRS availability Indicator, 
Dual Transfer Mode Indicator, 

- IMSI Detach/ Attach indicator, 

- MSC Release Indicator, 

- SGSN Release Indicator, 
T3212 timer value. 
Routing Area Code, 

Emergency Call Mode Preference and 

- Emergency Call indicator 

GAN Location Area Identity 

Store the Early Classmark Sending Indicator from GAN Control Channel Description IE 

Start Keep alive mechanism as defined in sub-clause 6.5 using the received TU3906 Timer IE 

Use the received TU3910 Timer value as follows: 

When the MS roves out, it shall start timer TU3910 and shall not rove in until this timer has expired, unless the 

MS has detected loss of GERAN or UTRAN coverage. 

- If the GA-RC REGISTER ACCEPT was received from the Default GANG, 

the MS shall store the received Serving GANC table indicator. 

If the stored Serving GANC Table indicator is set to "store", update the stored Serving GANC table as following 
(the SEGW and GANC address information type, i.e. FQDN or IP address, stored depends on the address type 
held by the MS when initiating registration i.e. if the MS held an IP address, then that IP-address shall be stored 
and if the MS held an FQDN, then that FQDN shall be stored), 

- If the MS is in GERAN/UTRAN coverage and this was indicated in the GA-RC REGISTER REQUEST 
by including a current GSM CGI or UTRAN Cell Identity (LAI and Cell Identity which is defined in 

[3GPPTS 25.331]); 

- if the stored Serving GANC table does not contain the GSM CGI or UTRAN Cell Identity, add the GSM 
CGI or UTRAN Cell Identity to the table with the information about the Serving GANC: SEGW FQDN 
or IP-address, GANC FQDN or IP-address and the TCP port to be used (if received in the message, 
otherwise the TCP port for Registration as defined in sub-clause 12.2.1). 

- if the stored Serving GANC table contains the GSM CGI or UTRAN Cell Identity, update the 
information about the Serving GANC for this GSM CGI or UTRAN Cell Identity: SEGW FQDN or IP- 
address, GANC FQDN or IP-address and the TCP port to be used, as described above. 

- If the MS is not in GERAN/UTRAN coverage and this was indicated in the GA-RC REGISTER 
REQUEST 

if the stored Serving GANC table does not contain the AP-ID, add the AP-ID with the information about 
the Serving GANC: SEGW FQDN or IP-address, GANC FQDN or IP-address and the TCP port to be 
used (if received in the message, otherwise the TCP port for Registration as defined in sub-clause 12.2.1). 

if the stored Serving GANC table contains the AP-ID, update the information about the Serving GANC 
for this AP-ID: SEGW FQDN or IP-address, GANC FQDN or IP-address and the TCP port to be used, as 
described above. 

6.2.3.2 Registration redirected 

When the MS receives GA-RC REGISTER REDIRECT message, it shall: 

- stop the timer TU3904, 
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Increment the Redirection counter, 

release the TCP connection towards the GANC 

- if the GA-RC REGISTER REDIRECT was received from the Default GANC, the MS shall; 

If the GANC included the Serving GANC Table indicator with the value set to "store", store the received 
Serving GANC table indicator; 

- if the GA-RC REGISTER REDIRECT contains the GAN PLMN List information element; 
store the information received in the GAN PLMN List information element 

- pass the received list of PLMN identities to the upper layers for PLMN selection as per 3GPP TS 23.122; 

- release the secure connection towards SEGW of the Default GANC as defined in sub-clause 4.5; and; 

following PLMN selection by the upper layers, initiate the registration procedure towards the GANC 
associated with the selected PLMN as defined in sub-clause 6.2; 

if the returned SEGW is the same as the one used for the connection towards the previous GANC, 

- reuse the same secure connection towards the returned GANC as following; 

- if the GA-RC-REGISTER REDIRECT was received from the Default GANC, then 

if the stored Default GANC-SEGW address information is in an IP address format and the received 
GA-RC REGISTER REDIRECT message contains the Serving GANC-SEGW IP address IE, and 
these two IP addresses match, the MS shall reuse the secure connection 

- or if the stored Default GANC-SEGW address information is a FQDN and the received GA-RC 
REGISTER REDIRECT message contains the Serving GANC-SEGW FQDN IE, and these identifiers 
match, the MS shall reuse the secure connection. 

- if the GA-RC-REGISTER REDIRECT was received from a Serving GANC, then 

- if the MS held a Serving GANC-SEGW IP address for the current Serving GANC (either in the 
Serving GANC store or received in a previous GA-RC REGISTER REDIRECT) and the received 
GA-RC REGISTER REDIRECT contains the Serving GANC-SEGW IP address IE, and these two IP 
addresses match, the MS shall reuse the secure connection or 

- if the MS held a Serving GANC-SEGW FQDN identifier (either in the Serving GANC store or 
received in a previous GA-RC REGISTER REDIRECT) and the received GA-RC REGISTER 
REDIRECT contains the Serving GANC-SEGW FQDN IE, and these identifiers match, the MS shall 
reuse the secure connection 

otherwise release the secure connection towards SEGW of the previous GANC as defined in sub-clause 4.5 

initiate the registration procedure towards the returned GANC as defined in sub-clause 6.2. 

6.2.3.3 Registration rejected 

When the MS receives GA-RC REGISTER REJECT message it shall: 

- stop the timer TU3904, 

if the MS is in the process of PLMN selection; 

ignore the received Register Reject Cause Information Element; and; 

- proceed as defined in sub-clause 6.2.4.5. 

else extract the Register Reject Cause information element and act as following depending on the value of the 
Reject Cause IE: 

'Network Congestion' 

- create a random value between zero and the received value in IE 'TU3907 Timer' and 
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- add this value to the received value in IE 'TU3907 Timer', and use this as the new value for TU3907 

- start timer TU3907 according to the new calculated value 

'AP not allowed' 

- release the TCP connection established to the GANC, if still established, 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 
4.5 

- store the AP-ID in the AP Black List and not initiate a new Register Request from this AP, until the AP- 
ID is removed from the AP Black List i.e. as a result of power-cycle. 

'Location not allowed' 

- release the TCP connection established to the GANC, if still established, 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 
4.5 

update the Location Black List according to the received information elements Location Black List 
indicator and Location Area Identification and not initiate a new Register Request from that Location, 
until the Location is removed from the Location Black List i.e. as a result of power-cycle. 

- 'IMSI not allowed' 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 
4.5 

not initiate a new Registration procedure until the next power-on. 

'Invalid GANC or 'Unspecified' 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 
4.5 

act as defined in sub-clause 6.2.4.5 

'Geo Location not known' 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 
4.5 

not retry registration from this AP until the location is provided or until the next power-on. 

The MS shall also: 

Update the stored Serving GANC table as following if the received Reject cause was not 'Network Congestion' 
or 'Geo Location not known' 

- If the MS is in GERAN/UTRAN coverage 

Remove information related to the current GSM-CGI or UTRAN Cell Identity, if exists in the table 

- If the MS is not in GERAN/UTRAN coverage 

- Remove information related to the AP-ID, if exists in the table. 

6.2.4 Abnormal cases 
6.2.4.1 TU3904 expiry 

If timer TU3904 expires in the MS, the MS shall: 

release the TCP connection towards the GANC, 

release the secure connection towards SEGW of the GANC as defined in sub-clause 4.5, 

If registration is unsuccessful after a number of attempts defined by the MS parameter "Up Register Max 
Retries" (defined in sub-clause 12.2.3), the MS shall act as defined in sub-clause 6.2.4.5. 

Otherwise, start timer TU3905 
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6.2.4.2 Lower layer failure in the MS 

Lower layer failure in the MS can be for example related to DNS, IPsec or TCP. If any lower layer failure happens in 
the MS, the MS shall: 

release the TCP connection towards the current GANC, if established, 

release the secure connection towards SEGW of the current GANC, if established, as defined in sub-clause 4.5 
and 

If unsuccessful after a number of attempts defined by the MS parameter "Up Connect Attempt Count" (defined 
in sub-clause 12.2.3), the MS shall act as defined in sub-clause 6.2.4.5. 

Otherwise, start timer TU3905 

6.2.4.3 TU3905 expiry 

If timer TU3905 has expired in the MS, the MS shall restart the Registration procedure as defined in sub-clause 6.2.1. 

6.2.4.4 TU3907 expiry 

If timer TU3907 expires in the MS, the MS shall: 

If registration is unsuccessful after a number of attempts defined by the MS parameter "Up Register Max 
Retries" (defined in sub-clause 12.2.3), the MS shall act as if a "Lower layer failure in the MS" has occurred as 
defined in sub-clause 6.2.4.2 

else, if the TCP connection to the GANC is still established, 

- send a GA-RC REGISTER REQUEST, and 

- start timer TU3904 

else, restart the Registration procedure towards the GANC as defined in sub-clause 6.2.1 

6.2.4.5 Registration Failure 

The MS shall; 

If the PLMN selection is ongoing: 

act on upper layer indications as follows; 

If no more PLMNs are available for selection; 

stop all ongoing registration procedures; 

release the TCP connection towards the current GANC, if established, 

release the secure connection towards SEGW of the current GANC, if established, as defined in sub- 
clause 4.5 

initiate registration towards the Default GANC as defined in sub-clause 6.2. 1 ; 

else if the upper layers indicate new PLMN selection: 

initiate registration procedure towards the GANC associated with the selected PLMN as defined in 
sub-clause 6.2. 

else if the MS attempted the registration towards the Default GANC 

delete the stored information about the Default GANC, 

delete the contents of the stored Serving GANC table 

Increment Redirection Counter 
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initiate Discovery Procedure as defined in sub-clause 5.3 

else if the MS attempted the registration towards current GANG is a Serving GANG 

Update the stored Serving GANG table as defined in the end of sub-clause 6.2.3.3 (i.e. delete information 
about this Serving GANG in the table) and 

Increment Redirection Gounter 

initiate Registration Procedure towards the Default GANG as defined in sub-clause 6.2. 1 



6.3 Registration Update procedure 

After the MS has successfully registered to a GANG, the MS shall update the GANG if the AP or the overlapping 
GERAN/UTRAN coverage has changed. This update is performed using the Registration Update procedure. 

The GANG may also use the Registration Update procedure towards the MS. 

Figure 6.3.1 : Registration Update procedure initiated by the lUIS 



MS 



GANG 



GA-RG REGISTER UPDATE DOWNLINK 



Figure 6.3.2: Registration Update procedure initiated by the networl< 

6.3.1 Register Update initiation by tine MS 

MS initiates this procedure when it has registered successfully to GANG and detects that: either the AP has changed;, or 
when the MS enters GERAN/UTRAN coverage after reporting no coverage during GAN registration; or when the 
mobile station requires a change to the list of GAN services previously requested. 

The MS shall: 

- send a GA-RG REGISTER UPDATE UPLINK message to the GANG on the estabhshed TGP connection and 
include the changed information in the message. 

6.3.2 Register Update processing by tine network 

When receiving the GA-RG REGISTER UPDATE UPLINK message, the network may either accept or reject the 
Registration Update. The network may also redirect the MS to another GANG. 



6.3.2.1 



Register Update Accepted 



If the network accepts the Registration Update, no message is returned to the MS. 



6.3.2.2 



Register Update Rejected 



If the network rejects the Registration Update, it shall send the GA-RG DEREGISTER message to the MS. This 
message shall contain the Register Reject Gause information element. 



6.3.2.3 



Register Update results in redirection 



If the network decides to redirect the MS to another GANG, it shall send the GA-RG REGISTER REDIREGT message 
to the MS. This message shall contain valid information about another GANG, so that the MS is able to initiate the 
Registration procedure towards that GANG. 
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The GANG can send the GA-RG REGISTER REDIREGT message at any time, but it shall not be sent to an MS in GA- 
CSR-DEDICATED state. 

6.3.3 Register Update Response handling in tine MS 



6.3.3.1 



Register Update Rejected 



When the MS receives the GA-RC DEREGISTER message, it shall act as defined in sub-clause 6.4.4 "Reception of 
GA-RC DEREGISTER by MS". 



6.3.3.2 



Register Update results in redirection 



When the MS receives GA-RC REGISTER REDIRECT message, it shall act as defined in sub-clause 6.2.3.2 
"Registration redirected". 

6.3.4 Register Update initiation by the network 

The network may at any time send the GA-RC REGISTER UPDATE DOWNLINK message to a MS that is registered. 
This could happen e.g. because of change in the GANG System Information. The network may include all information 
in this message (i.e. not necessarily only the changed information). 

6.3.5 Register Update handling in the MS 

When the MS receives GA-RC REGISTER UPDATE DOWNLINK message, it shall process the received information 
elements as defined in sub-clause 6.2.3.1. 

6.4 MS deregistration 

The MS should attempt to perform deregistration procedure before leaving the AP. Optionally, the network could also 
initiate deregistration of a MS. 



MS 



GANG 



GA-RC DEREGISTER 



Figure 6.4.1 : Deregistration procedure initiated by thie IVIS 
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Figure 6.4.2: Deregistration procedure initiated by thie networic 

6.4.1 Deregistration initiated by the MS 

When the MS is leaving or about to leave the GAN coverage and the MS has successfully registered with a GANC, it 
should: 

send the GA-RC DEREGISTER -message using the currently established TCP-connection, 
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release the TCP connection towards the GANC, 

release the secure connection towards the SEGW, as defined in sub-clause 4.5 and 

release all resources related to GAN 

6.4.2 Reception of GA-RC DEREGISTER by GANC 

When the network receives the GA-RC DEREGISTER message, it shall release all resources associated with the MS. 

6.4.3 Deregistration initiated by tine network 

The GANC may at any time initiate the deregistration of a MS by sending the GA-RC DEREGISTER message to the 
MS. When the GA-RC layer in the network has submitted the GA-RC DEREGISTER message to the TCP layer, it may 
initiate release of its half of the bidirectional TCP connection. 

6.4.4 Reception of GA-RC DEREGISTER by MS 

When the MS receives the GA-RC DEREGISTER message, it shall: 
if the MS is in the process of PLMN selection; 

ignore the received Register Reject Cause Information Element, and 

- proceed as defined in sub-clause 6.2.4.5. 

else extract the Reject Cause information element and act as following depending on the value of the Reject 
Cause IE: 

'Network Congestion' 

- release all local GAN resources (e.g. MS is in active call over GAN) 

- release the TCP connection towards the current GANC and 

- release the secure connection towards the GANC-SEGW, as defined in sub-clause 4.5 
create a random value between zero and the received value in IE "TU3907 Timer" and 

add this value to the received value in IE "TU3907 Timer", and use this as the new value for TU3907 
start timer TU3907 according to the new calculated value 
'AP not allowed' 

- release the TCP connection established to the GANC, if still established, 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 4.5, 

store the AP-ID in the AP Black List of and not initiate a new Register Request from this AP, until the 
AP-ID is removed from the AP black list i.e. as a result of power-cycle. 

- 'Location not allowed' 

- release the TCP connection established to the GANC, if still established, 

- release the secure connection towards the SEGW associated with the GANC, as defined in sub-clause 4.5, 

- update the Location Black List according to the received information elements Location Black List 
indicator and Location Area Identification and not initiate a new Register Request from that Location, 
until the Location is removed from the Location Black List i.e. as a result of power-cycle. 

- 'IMSI not allowed' 
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- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC as defined in sub-clause 4.5, 
not initiate a new Registration procedure until the next power-on. 

- 'Unspecified' 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC as defined in sub-clause 4.5, 
act as if a "Lower layer failure in the MS" has occurred as defined in sub-clause 6.2.4.2 

- 'Invahd GANC 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC as defined in sub-clause 4.5, 
act as defined in sub-clause 6.2.4.5 "Registration Failure" 

'Geo Location not known' 

- release the TCP connection established to the GANC, if still established. 

- release the secure connection towards the SEGW associated with the GANC as defined in sub-clause 4.5, 
not retry registration from this AP until the location is provided or until the next power-on. 

The MS shall also. 

Update the stored Serving GANC table as following if the received Reject cause was not 'Network Congestion' 
or 'Geo Location not known' 

- If the MS is in GERAN/UTRAN coverage 

Remove information related to the current GSM-CGI or UTRAN Cell Identity, if exists in the table 

- If the MS is not in GERAN/UTRAN coverage 

- Remove information related to the AP-ID, if exists in the table. 

6.5 Keep alive mechanism and TU3906 expiry 

When the MS receives the GA-RC REGISTER ACCEPT message, it shall initiate the GA-RC Keep Alive -mechanism 
by starting timer TU3906 using the TU3906 Timer value received in that message. 

When timer TU3906 expires in the MS, the MS shall send the GA-RC KEEP ALIVE -message to the GANC and start 
timer TU3906. 



MS 



GANC 



GA-RC KEEP ALIVE 



Figure 6.5.1 : Keep Alive procedure 

If the MS detects, that it is not able to send the GA-RC KEEP ALIVE message to the network due to lower layer 
failure, it shall act according to sub-clause 9.5. 
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6.6 MS Initiated Synchronization after TCP connection 
reestablishment 

When MS receives TCP RST after TCP connection failure, it shall try to re-establish the signalling connection using 
GA-RC Synchronization procedure. The following message flow depicts the messages associated with this procedure: 



MS 



GANG 



GA-RC SYNCHRONIZATION INFORMATION 



Figure 6.6.1 MS initiated synchronization procedure 

6.6.1 Initiation of the Synchronization Procedure by the MS 

When MS receives TCP RST after TCP connection failure, it shall attempt to re-establish TCP connection once. After 
successfully re-establishing TCP connection, the MS shall send GA-RC SYNCHRONIZATION INFORMATION to 
the GANC to synchronize the state information. If unsuccessful, the MS shall release the related local GA-CSR or GA- 
PSR resources, and continue as per section 9.5. 

6.6.2 Processing of the Synchronization Information message by the 
GANC 

Upon receiving the GA-RC SYNCHRONIZATION INFORMATION message from the MS, the GANC updates the 
MS state information as specified in the request. 

Moreover, the GANC should verify that the binding (IMSI, inner IP address) as received in the GA-RC 
SYNCHRONIZATION INFORMATION is the same as the one that the MS used as identity for authentication to the 
GANC-SEGW. 

6.7 Transmission of Cell Broadcast Information 

If the GANC has previously received the indication that the mobile station requires to receives the CBS, the GANC 
may pass the GA-RC CELL BROADCAST INFO message to a mobile station including one or more pages of Cell 
Broadcast messages. 



MS 


GA-RC CELL BROADCAST INFO 


GANC 




^ 

















Figure 6.7.1 : Transmission of Cell Broadcast Information by the network 



Elementary procedures for CS domain 



7.1 



GA-CSR Connection establishment 



The GA-CSR connection is a logical connection between the MS and the GANC. It is established when the upper layers 
in the MS request GA-CSR to enter dedicated mode. The MS initiates GA-CSR connection establishment by sending 
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the GA-CSR REQUEST message to the network. When a successful response is received from the network, GA-CSR 
repHes to the upper layer that it has entered dedicated mode. The upper layers have then the possibility to request 
transmission of messages to the network. These messages are sent to the network using GA-CSR UPLINK DIRECT 
TRANSFER messages as defined in sub-clause 7.2.1. 

Two service access points are defined which are discriminated by their Service Access Point Identifiers (SAPI): 

S API 0: supports the transfer of signalling information including user-user information; 

SAPI 3: supports the transfer of user short messages. 



MS 



GANG 



GA-CSHdEfrE 



Start TU3908 
Stop TU3908 



GA-CSR REQUEST 

GA CSR REQUEST ACCEPT 



GA-CSR 
DEDICATED 



Figure 7.1.1 Initiation of GA-CSR connection, successful case 



MS 



GANG 



Start TU3908 
Stop TU3908 



GA-GSR REQUEST 
GA-GSR REQUEST REJEGT 



7.1.1 



Figure 7.1.2 Initiation of GA-CSR connection, failure case 



Initiation of GA-CSR connection establisinment by tine MS 



The MS initiates the establishment of the GA-CSR connection when the upper layers request the GA-CSR to enter 
dedicated state. 

Before initiation of GA-CSR connection establishment request, the MS shall check for access permission based on 
Access Control Class bits returned within GA-RC REGISTER ACCEPT message as defined in [12]. 

If it is allowed for the MS to access the network, it shall send a GA-CSR REQUEST message to the GANC on the 
established TCP connection and include the Establishment Cause IE and start timer TU3908 
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7.1 .2 Reception of GA-CSR REQUEST by GANG 

When GANC receives GA-CSR REQUEST message, the GANG may either accept or reject the GA-CSR connection 
estabUshment request. 

7.1 .2.1 GA-CSR connection establishment request accepted 

If the GANC accepts the GA-CSR connection estabUshment request, it shall send the GA-CSR REQUEST ACCEPT 
message to the MS. 

7.1 .2.2 GA-CSR connection establishment request rejected 

If the GANC rejects the GA-CSR connection estabhshment request, it shall send the GA-CSR REQUEST REJECT 
message to the MS. 

7.1 .3 GA-CSR connection establishment response handling in the MS 

7.1 .3.1 GA-CSR connection establishment request accepted 

When the MS receives the GA-CSR REQUEST ACCEPT message, it shall: 
if timer TU3908 is active: 

- stop timer TU3908, 

- move into GA-CSR-DEDICATED state , 

indicate to upper layers that GA-CSR has entered dedicated state and 

- send the initial GA-CSR UPLINK DIRECT TRANSFER message to the network 
if timer TU3908 is not active: 

- ignore the GA-CSR REQUEST ACCEPT message and 

continue with any ongoing procedure as if the GA-CSR REQUEST ACCEPT message was not received 

7.1 .3.2 GA-CSR connection establishment request rejected 

When the MS receives the GA-CSR REQUEST REJECT message, it shall: 
if timer TU3908 is active: 

- stop timer TU3908, 

- remain in GA-CSR-IDLE state and 

indicate to upper layers that GA-CSR was not able to enter dedicated state 
if timer TU3908 is not active: 

- ignore the GA-CSR REQUEST REJECT message and 

continue with any ongoing procedure as if the GA-CSR REQUEST REJECT message was not received 

7.1.4 Failure cases 
7.1.4.1 Timer TU3908 expiry 

If timer TU3908 expires in the MS, the MS shall remain in GA-CSR-IDLE state and indicate to upper layers that GA- 
CSR was not able to enter dedicated state 
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7.2 Upper layer message transmission 

The GA-CSR UPLINK DIRECT TRANSFER message is used for the transfer of upper layer messages from the MS to 
the GANG while the GA-CSR DOWNLINK DIRECT TRANSFER message is used for the transfer of upper layer 
messages from the GANG to the MS. The first GA-CSR UPLINK DIRECT TRANSFER message received by the 
GANG triggers the establishment of the signalling connection to the CN for that MS. 

7.2.1 Upper layer message forwarding by the MS 
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Figure 7.2.1.1 Uplink Direct Transfer, normal flow 

The MS shall initiate the Uplink Direct Transfer procedure in GA-CSR-DEDICATED state when the upper layers 
request a transfer of a non-access stratum message. 

The MS shall include the contents of the received upper layer message in the IE "L3 Message" and set the SAPI used in 
the IE "SAPI ID". 

7.2.2 Reception of GA-CSR UPLINK DIRECT TRANSFER by GANC 

When the GANC receives GA-CSR UPLINK DIRECT TRANSFER message from an MS in GA-CSR-DEDICATED 
state for which there is no signalling connection to the core network (i.e. this is the first GA-CSR UPLINK DIRECT 
TRANSFER after GA-CSR Connection establishment) the GANC should trigger the normal A-interface procedures 
towards the Core network to establish a signalling connection. GANC should transfer the contents of the IE "L3 
Message" to the CN. The GANC should transfer the contents of the IE "SAPI ID" to the CN. 

7.2.3 Upper layer message forwarding by the GANC 
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Figure 7.2.3.1 Downlink Direct Transfer, normal flow 

The Downlink Direct Transfer procedure is initiated by the GANC, when the GANC receives a request from the upper 
layers to transfer a non-access stratum message, after the establishment of the GA-CSR connection to the MS. 

On receiving a request from the upper layers the GANC should include the contents of the upper layer message in the 
IE "L3 Message". 
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7.2.4 Reception of GA-CSR DOWNLINK DIRECT TRANSFER by the MS 

When the MS receives the GA-CSR DOWNLINK DIRECT TRANSFER message it shall forward the contents of the 
message to the upper layers. 



7.2.4.1 



Invalid GA-CSR DOWNLINK DIRECTTRANSFER 



If the MS receives a GA-CSR DOWNLINK DIRECT TRANSFER message and MS is not in GA-CSR-DEDICATED 
state, the MS shall: 

- ignore the contents of the GA-CSR DOWNLINK DIRECT TRANSFER message; 
transmit a GA-CSR STATUS message as follows: 

set the IE "RR Cause" to "Message type not compatible with protocol state" 
include the received message contents in the IE "PDU in error" 

- continue with any ongoing procedure and act as if the GA-CSR DOWNLINK DIRECT TRANSFER message 
was not received. 



7.3 Paging for CS domain 
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Figure 7.3.1 Paging, normal flow 

7.3.1 Initiation of Paging 

The GANC initiates this procedure when it receives a PAGING REQUEST message over the A-interface or a Paging 
CS message over the Gb-interface. The MS to be paged is identified by the identity received in the request from the CN. 
If the request includes the TMSI then the GANC should include the TMSI as the mobile identity else it should include 
the IMSI received in the request. 

7.3.2 Reception of GA-CSR PAGING REQUEST by the MS 

If the mobile identity in the GA-CSR PAGING REQUEST message matches any of the valid identities of the MS and 
the MS is in GA-CSR-IDLE state, the MS shall: 

if timer TU3908 is not active and access to the network is allowed; 

- send a GA-CSR PAGING RESPONSE message to the GANC and 

- enter GA-CSR-DEDICATED state. 
if timer TU3908 is active; 
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- discard the received GA-CSR PAGING REQUEST message 

7.3.3 Reception of GA-CSR PAGING RESPONSE by the GANG 

On receiving the GA-CSR PAGING RESPONSE message the GANG should establish the signalling connection to the 
MSC and forward the contents of the GA-CSR PAGING RESPONSE message to the MSC. 

7.3.4 Abnormal Cases 

If the MS receives a GA-CSR PAGING REQUEST message and MS is in GA-CSR-DEDICATED or GA-CSR- 
REGISTERED, the MS shall: 

- ignore the GA-CSR PAGING REQUEST message 

continue with any ongoing procedure as if the GA-CSR PAGING REQUEST was not received. 

If the MS receives a GA-CSR PAGING REQUEST and the mobile identity included in the message does not match any 
of the valid identities assigned to the MS, the MS shall: 

- ignore the GA-CSR PAGING REQUEST message 

continue with any ongoing procedure as if the GA-CSR PAGING REQUEST message was not received. 



7.4 Traffic Channel assignment 



MS 



GANG 



GA-CSR 
DEDICA"" 



TED 



GA-CSR ACTIVATE CHANNEL 



GA-CSR ACTIVATE CHANNEL ACK 



GA-CSR ACTIVATE CHANNEL COMPLETE 



Figure 7.4.1 Channel Activation, successful case 

7.4.1 Initiation of Channel Assignment 

The GANC configures a traffic channel by transmitting the GA-CSR ACTIVATE CHANNEL message on receiving an 
Assignment Request from the MSC. The GA-CSR ACTIVATE CHANNEL message can be sent to the MS only in GA- 
CSR-DEDICATED state. The Channel Assignment procedure is always activated by the network. 

7.4.2 Reception of GA-CSR ACTIVATE CHANNEL by MS 

The MS shall act on the received GA-CSR ACTIVATE CHANNEL message when in GA-CSR-DEDICATED state as 
follows: 

Code and decode the CS payload samples according to the IE "Channel Mode"; 

Use the value indicated by the IE "Sample Size" as the minimum sampling size for the coding and decoding of 
the CS payload samples, if the MS is not able to use the indicated value. If AMR is used with EEC by sending 
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redundant frames, the sample size is defined as the size of the new speech sample in each RTP packet, not 
including any redundant speech sample. 

Configure the uplink CS payload stream to be transmitted to the UDP port identified by the IE "UDP Port"; 

Configure the uplink CS payload stream to be transmitted to the IP address identified by the IE "IP address"; 

If received, use the configuration included in the IE 'Multi-rate Configuration' for the CS payload stream; 

If received, use the configuration included in the IE "RTP Redundancy Configuration" for the CS payload 
stream. The redundancy policy is defined for each of the AMR modes to use. The level of redundancy can span 
from no redundancy to double redundancy. In the same active codec set, a lower codec mode shall not be 
associated with a lower reduncancy level then a higher codec mode. For example, the highest mode in the set is 
used with no redundancy, the next lower with single redundancy and rest of the modes with double redundancy; 

If received, use the Payload Type included in the IE 'Payload Type' for the PT field in the RTP header for the CS 
payload stream; 

On successful activation of the channel, the MS shall: 

- Transmit a GA-CSR ACTIVATE CHANNEL ACK message and include the UDP port number in the IE 'UDP 
Port" for the downlink CS payload stream to be used by the GANC. 

Include the selected RTP sample size, to be used uplink and downlink, in the IE Sample Size. 

- if the IE 'RTCP UDP Port' was received in the GA-CSR ACTIVATE CHANNEL message and the MS is 
capable of supporting RTCP, activate the uplink RTCP stream and include the IE 'RTCP UDP Port' for the 
downlink RTCP stream to be used by the GANC. 

7.4.3 Reception of GA-CSR ACTIVATE CHANNEL ACK by GANC 

The GANC should configure itself for transmission of RTP packets to the MS to the indicated UDP port and RTCP 
packets to the MS, if the IE 'RTCP UDP Port' is included by the MS, and transmit a GA-CSR ACTIVATE CHANNEL 
COMPLETE message to the MS. 

To enable downlink quality measurements in the MS, the GANC shall send at least one RTP frame each 480 ms. 

7.4.4 Reception of GA-CSR ACTIVATE CHANNEL COMPLETE by MS 

The RTP channel is available for use by upper layers. To enable uplink quality measurements in the GANC, the MS 
shall send at least one RTP frame each 480 ms. 

7.4.5 Failure to establish channel by MS 

If the MS fails to establish the channel indicated in the GA-CSR ACTIVATE CHANNEL message the MS shall: 

- transmit a GA-CSR ACTIVATE CHANNEL FAILURE message 

- act as if the GA-CSR ACTIVATE CHANNEL message was not received. 

7.5 Release of GA-CSR 

7.5.1 Initiation of GA-CSR connection release by MS 

If the MS needs to release the GA-CSR connection and signalling connection to the core network, it shall send the GA- 
CSR CLEAR REQUEST message to the GANC. The MS shall include the 'RR Cause' IE. 
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Figure 7.5.1.1 Initiation of GA-CSR connection release by MS 



7.5.2 Reception of GA-CSR CLEAR REQUEST by GANC 

The GANC will request core network to initiate the procedure to release of dedicated resources. 

7.5.3 Initiation of GA-CSR connection release by GANC 
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Figure 7.5.3.1 Initiation of GA-CSR connection release by network 

The GANC initiates this procedure to command the MS to release the GA-CSR and any traffic channel resources and 
instruct the MS to leave GA-CSR-DEDICATED state. 

The GA-CSR RELEASE message will include an RR cause indication as follows: 

#0: normal release, e.g. at the end of a call. 

#1 : unspecified abnormal release. 

#65: if e.g. a handover procedure is stopped because the call has been cleared. 

7.5.4 Reception of GA-CSR RELEASE by MS 

When the MS receives the GA-CSR RELEASE message, it shall: 

- transmit a GA-CSR RELEASE COMPLETE message to the GANC and release all GA-CSR and any traffic 
channel resources, 

- Enter GA-CSR-IDLE state. 

A mobile station not supporting "GPRS" shall consider the IE "GPRS Resumption" as unknown in the GA-CSR 
RELEASE message and perform the GA-CSR Release procedure as normal. 

For a MS supporting the "GPRS" option: 
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if the GA-CSR RELEASE message includes the IE "GPRS Resumption": 

if the GPRS Resumption information element indicates that the network has resumed GPRS services, the 
GA-CSR sub-layer of the mobile station shall indicate a GA-CSR GPRS resumption complete to the MM 
sub-layer. 

- if the GPRS Resumption information element indicates that the network has not successfully resumed 
GPRS services, the GA-CSR sub-layer of the mobile station shall indicate a GPRS resumption failure to 
the MM sub-layer. 

if the mobile station has performed the GPRS suspension procedure (sub-clause 8.10) and the GPRS Resumption 
information element is not included in the message, the GA-CSR sub-layer of the mobile station shall indicate a 
GPRS resumption failure to the MM sub-layer. 

if the mobile station has not performed the GPRS suspension procedure and the GPRS Resumption information 
element is not included in the message, the mobile station shall perform the channel release procedure as normal 



7.6 



Classmark Indication 



7.6.1 Initiation of classmark interrogation by GANG 
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GA-CSR- DEDICATED 



GA-CSR CLASSMARK ENQUIRY 



GA-CSR CLASSMARK CHANGE 



GANC 



GA-CSR UTRAN CLASSMARK CH 
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Figure 7.6.1.1 Classmark change 

The GANC initiates the classmark interrogation procedure by transmitting the GA-CSR CLASSMARK ENQUIRY 
message to the MS when it desires more information about the MS's capabilities. The GA-CSR CLASSMARK 
ENQUIRY message can be sent to a MS only in GA-CSR-DEDICATED state. 

7.6.2 Transmission of classmark information by MS 

On receipt of the GA-CSR CLASSMARK ENQUIRY message or in case of "early classmark sending" procedure based 
on the system information indication received in GA-RC REGISTER ACCEPT message, the mobile station sends a 
GA-CSR CLASSMARK CHANGE message to the GANC. 

The MS shall include the IE "Mobile Classmark 2" in the GA-CSR CLASSMARK CHANGE message. It may also 
contain a IE "Mobile Classmark 3" depending on the MS capabilities. 

In addition a MS supporting UTRAN sends a GA-CSR UTRAN CLASSMARK CHANGE message. 

The Classmark Enquiry Mask information element in the GA-CSR CLASSMARK ENQUIRY message indicates the 
type of request. If the Classmark Enquiry Mask information element is not included in the GA-CSR CLASSMARK 
ENQUIRY message, this indicates a request for GA-CSR CLASSMARK CHANGE message. 

In the "early classmark sending" case the GA-CSR UTRAN CLASSMARK CHANGE message shall not be sent by the 
MS if prohibited by the 3G Early Classmark Sending Restriction received as system information in GA-RC REGISTER 
ACCEPT message. 
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The GA-CSR UTRAN CLASSMARK CHANGE and GA-CSR CLASSMARK CHANGE message shall only be sent 
by a MS in GA-CSR-DEDICATED state 

When an GA-CSR CLASSMARK CHANGE message and an GA-CSR UTRAN CLASSMARK CHANGE message 
are to be sent, the GA-CSR CLASSMARK CHANGE message shall be sent first. 



7.7 



Handover to GAN 
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Figure 7.7.1 : Handover to GAN, successful case 



7.7.1 



Initiation 



The procedure is initiated when the source radio access technology (e.g. GERAN) orders the MS to make handover to 
GAN. 

The procedure is applicable in GA-RC-REGISTERED state provided the conditions described in Annex C: "(Source- 
RAT) Measurement Report for Handover and Cell Change Order to GAN" are met. 

The handover order in the source radio access technology mode is sent via the (RR) HANDOVER COMMAND 
message. If the ARFCN and BSIC parameters included in the Cell Description IE in the (RR) HANDOVER 
COMMAND message (specified in [12]) match those of the GAN cell, the MS shall: 

- send a GA-CSR HANDOVER ACCESS message to the network including the complete (RR) HANDOVER 
COMMAND message in the Handover To GAN Command IE and enter GA-CSR-DEDICATED state; 

NOTE: sending the complete (RR) HANDOVER COMMAND message in the Handover To GAN Command IE 
instead of the Handover Reference IE allows for more than 256 concurrent handover requests 

if non-signalling mode is indicated in Channel Mode IE, the MS shall: 

- start timer TU3920; 
otherwise, the MS shall: 

- immediately send a GA-CSR HANDOVER COMPLETE message to the network; 

- switch to GAN mode i.e. attach the GA-RR entity to the RR-SAP; 

7.7.2 Reception of GA-CSR HANDOVER ACCESS by the GANC 

If non-signalling mode is indicated in the Channel Mode IE, the GANC shall initiate traffic channel assignment as 
specified in sub-clause 7.3. 
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7.7.3 Successful completion of the Handover to GAN 

If the traffic channel assignment was successfully completed within timer TU3920, the MS shall: 

- stop timer TU3920; 

- send a GA-CSR HANDOVER COMPLETE message to the network; 

- switch to GAN mode i.e. attach the GA-RR entity to the RR-SAP; 

In addition the MS shall send upper layer messages for which LAPDm has not yet received acknowledgement from the 
network to the network using the GA-RR entity. 

7.7.4 Reception of GA-CSR HANDOVER COMPLETE by the GANC 

The GANC should indicate handover detection and completion to CN. 

7.7.5 MS fails to complete requested handover 

If the traffic channel assignment procedure fails or the timer TU3920 expires before traffic channel assignment is 
completed, the MS shall: 

terminate the procedure including release of the associated GA-CSR resources; 

resume the connection in the source radio access technology used before the handover; 

indicate the failure to the source radio access technology. 

7.8 Handover from GAN 

MS GANG 

GA-GSR 
DEDICATED 

GA-CSR UPLINK QUALITY INDICATION 
GA-CSR HANDOVER INFORMATION 
GA-CSR HANDOVER COMMAND 

GA-CSR- 
REGISTERED 

Figure 7.8.1 : Handover from GAN, successful case 
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Figure 7.8.2: Handover from GAN, failure case 



7.8.1 



Initiation 



The purpose of this procedure is to transfer, upon request from the MS (and under the control of the GAN), a 
connection between MS and GAN to another radio access technology (e.g. GERAN). 

The procedure is apphcable in GA-CSR-DEDICATED state. 

The procedure may be initiated by the MS based on: 

local measurements of GAN coverage signal quality; 

- reception of a GA-GSR UPLINK QUALITY INDICATION message indicating poor uplink quality in the UL 
Quality Indication IE; If the UL Quality Indication IE indicates "Network problem" a handover out to GERAN 
or UTRAN should be attempted. In case the UL Quality Indication information element shows "Radio problem" 
or "Undetermined problem" a search for a new access point should be done before the handover out is initiated. 

reception of RTCP packets indicating poor uplink quality; 

excessive loss or delay in the received RTF packets 

When the MS decides to trigger the handover from GAN, it shall: 

- send a GA-GSR HANDOVER INFORMATION message to the network including a list of candidate/ target cell 
identifiers ranked in order of preference which is the most recent list available from the other radio access 
technology (e.g. GSM RR) and including the received signal strength for each identified GERAN or UTRAN 
cell. 

7.8.2 Reception of GA-CSR HANDOVER INFORMATION by the GANG 

The GANG should signal the need for handover to the CN. 

If the CN grants the handover request, GANG should send a GA-CSR HANDOVER COMMAND message to the MS. 

7.8.3 Reception of GA-CSR HANDOVER COMMAND by the MS 

The MS shall: 

suspend all NAS layer signalling transmissions; 

start the connection establishment to the target radio access technology (e.g. GERAN) by using the contents of 
the Handover From GAN Command IE. This message carries information about the candidate/ target cell 
identifier and radio parameters relevant for the target radio access technology; 

A MS that is simultaneously operating in GPRS and CS modes over GAN shall follow the procedure as outlined in 
3GPP TS 43.055 when it switches to target cell. 
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NOTE: The requirements concerning the establishment of the radio connection towards the target radio access 
technology (e.g. GERAN) and the signalling procedure are outside of the scope of this specification. 

7.8.4 Successful completion of the Handover from GAN 

Upon successfully completing the handover, GAN should: 

release all radio resources associated with the GAN connection. 
Upon successfully completing the handover, the MS shall: 

switch to target radio access technology (e.g. GERAN) mode i.e. detach the GA-RR entity from the RR-SAP; 

- enter GA-CSR-REGISTERED state. 

NOTE: The release of the GAN radio resources is initiated from the target RAT. Subsequently the MS may 
deregister from GAN as defined in sub-clause 6.4. 

7.8.5 MS fails to complete requested handover 

If the MS does not succeed in establishing a connection to the target radio access technology, the MS shall: 
revert back to the GAN configuration; 

- return a GA-CSR HANDOVER FAILURE message and resume normal operation as if the GA-CSR 
HANDOVER COMMAND message has not been received. The cause shall be set as specified in 3GPP TS 
44.018. 

7.8.6 Reception of GA-CSR HANDOVER FAILURE by the GANG 

The GANG may initiate the release of resources in the target radio access technology. 

7.8.7 Abnormal Cases 

If the GA-CSR HANDOVER COMMAND message instructs the MS: 

to perform a non-supported scenario, or 

to use a non-supported configuration, 

the MS shall return a GA-CSR HANDOVER FAILURE message with cause as defined in 3GPP TS 44.018 and resume 
normal operation as if the GA-CSR HANDOVER COMMAND message has not been received. 

7.9 Ciphering configuration procedure 

The ciphering configuration procedure is used by the network to set the ciphering mode, i.e. whether or not the 
transmission is ciphered, and if so which algorithm to use. This information is not used when the GA-CSR-layer is the 
serving entity in the MS, but shall be stored in the MS for possible future use after a handover from GAN during the 
same upper layer transaction (i.e. RR-layer becomes the serving entity during this upper layer transaction). 

This procedure applies only for a MS in GA-CSR-DEDICATED state. 

The procedure shall only be used to change from "not ciphered" mode to "ciphered" mode, or vice-versa, or to pass a 
GA-CSR CIPHERING MODE COMMAND message to the mobile station while remaining in the "not ciphered" mode. 
The ciphering mode setting procedure is always triggered by the network. 
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Figure 7.9.1 Ciphering configuration 

7.9.1 Ciphering configuration initiation 

The network initiates the ciphering mode setting procedure by sending a GA-CSR CIPHERING MODE COMMAND 
message to the mobile station, indicating whether ciphering shall be used or not, and if yes which algorithm to use. 

Additionally, the network may, by the use of the cipher response information element, request the mobile station to 
include its IMEISV in the GA-CSR CIPHERING MODE COMPLETE message. 

7.9.2 Ciplnering configuration completion 

Whenever the mobile station receives a valid GA-CSR CIPHERING MODE COMMAND message, it shall, if a SIM is 
present and considered valid and the ciphering key sequence number stored on the SIM indicates that a ciphering key is 
available, save information about the ciphering key to use if the MS is later performing Handover from GAN. A valid 
GA-CSR CIPHERING MODE COMMAND message is defined to be one of the following: 

one that indicates "start ciphering" and is received by the mobile station in the "not ciphered" mode; 

one that indicates "no ciphering" and is received by the MS in the "not ciphered" mode; or 

one that indicates "no ciphering" and is received by the mobile station in the "ciphered" mode. 

Other GA-CSR CIPHERING MODE COMMAND messages shall be regarded as erroneous, and a GA-CSR STATUS 
message with cause "Protocol error unspecified" shall be returned, and no further action taken. 

The MS shall also calculate a MAC (Message Authentication Code). The MAC shall be calculated over the following 
data: 

RAND I IMSI 

using "HMAC-SHAl-96" algorithm, as specified in [23] with Kc as authentication key. 

In the formulas above, the "I" character denotes concatenation. RAND is the 16-octet random number received from the 
GANG in the GA-CSR CIPHERING MODE COMMAND message. IMSI is the MS IMSI, in the same format as 
defined for the Mobile Identity IE as defined in [8] i.e. as a variable-length sequence of digits in BCD format (e.g. the 
IMSI "123456789098765" is encoded as the following octets (in hexadecimal): "21 43 65 87 09 89 67 F5"). Network 
byte order is used. 

The Kc key is the Kc that has been derived during the last authentication. The length of the MAC is 12 octets. 

When the appropriate action on the GA-CSR CIPHERING MODE COMMAND message has been taken, the mobile 
station sends back a GA-CSR CIPHERING MODE COMPLETE message. If the "cipher response" field of the cipher 
response information element in the GA-CSR CIPHERING MODE COMMAND message specified "IMEISV must be 
included" the mobile station shall include its IMEISV in the GA-CSR CIPHERING MODE COMPLETE message. 
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7.10 Channel mode modify procedure 

In dedicated mode, the GANC can request a modification of the channel mode, sample size, GANG IP address, GANG 
RTP UDP port and GANG RTGP UDP port used for an active traffic channel. 

The channel mode modify procedure allows the network to request the mobile station to modify configuration used for 
an active channel. The channel mode covers the coding, decoding and transcoding mode as well as the redundancy 
policy used on the active channel. 

This procedure is always initiated by the network. 
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Figure 7.10.1 Channel mode modify 

7.1 0.1 Normal channel mode modify procedure 

7.1 0.1 .1 Initiation of the channel mode modify procedure 

The network initiates the procedure by sending a GA-GSR GHANNEL MODE MODIFY message to the mobile station. 

7.1 0.1 .2 Completion of channel mode modify procedure 

When the MS has received the GA-GSR GHANNEL MODE MODIFY message, the mobile station modifies the 
configuration, sets the mode and/or the RTP redundancy configuration for the active channel and then replies by a GA- 
GSR GHANNEL MODE MODIFY AGKNOWLEDGE message indicating the ordered channel mode. 

This applies whether the mode and/or redundancy policy commanded by the GA-GSR GHANNEL MODE MODIFY 
message is different from the one used by the mobile station or whether it is already in use. 

When the MS has sent the GA-GSR GHANNEL MODE MODIFY AGKNOWLEDGE message, it shall start transmit 
RTP packets with the new size. Until RTP packets with the new sample size have been received, the MS should handle 
the reception of RTP packets with the old sample size. 



7.10.1.3 



Abnormal cases 



If the GA-GSR GHANNEL MODE MODIFY message includes IE "RTP Redundancy Gonfiguration" and MS has 
indicated that it does not support RTP Redundancy through the GAN Glassmark, it shall ignore the IE "RTP 
Redundancy Gonfiguration" . 

If the mobile station does not support the indicated channel mode or sample size modifications, it shall retain the old 
mode and return the used configuration in the GA-GSR GHANNEL MODE MODIFY AGKNOWLEDGE message. 
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8 



Elementary procedures for PS domain 



8.1 GA-PSR Transport Channel (GA-PSR TC) Overview 

The GA-PSR Transport Channel is defined as a UDP based point to point GA-PSR connection between the MS and the 
GANG utiHzed for GPRS user data transfer. The life-time of the GA-PSR TC is controlled by the TU4001 timer. The 
duration of the TU4001 timer is provided to the MS as one of the GAN system parameters in the GA-RC REGISTER 
ACCEPT message. In the same way as other GAN system parameters, the GANC can update the TU4001 timer using 
the standard mechanism for GAN system parameters update. The MS shall store the TU4001 timer for future use and 
updates the value when requested. 

8.2 MS Initiated GA-PSR Transport Channel (GA-PSR TC) 
Activation 

The MS initiated GA-PSR TC activation is triggered by the uplink GPRS user data request when the GA-PSR is in the 
GA-PSR-STANDBY state. The following message flow depicts the messages and timers involved in this procedure: 
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Figure 8.2.1 MS initiated GA-PSR TC Activation 

8.2.1 Initiation of tine GA-PSR TC Activation by tine MS 

Upon receiving the uplink user data transfer request from the LLC for LLC S API 3, 5, 9 or 1 1 and while the MS GA- 
PSR is in the GA-PSR-STANDBY state, the MS shall, 

- send a GA-PSR-ACTIVATE-UTC-REQ message, 

- start timer TU4002, 

set the uplink packet sequence number to 0, 

set the expected downlink packet sequence number to and 

8.2.2 Processing of tine GA-PSR TC Activation Request by tine GANC 

Upon receiving the GA-PSR-ACTIVATE-UTC-REQ message from the MS, if the GANC accepts this request, it: 
allocates the IP address and the UDP port number to be used by the MS for GPRS user data transport, 
sends the GA-PSR- ACTIVATE-UTC-ACK message to the MS with the cause indicating successful activation, 
sets downlink packet sequence number to and 
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sets the expected uplink packet sequence number to 0. 

8.2.3 Processing of the GA-PSR TC Activation Acknowledgment by tine 
MS 

Upon receiving the GA-PSR-ACTIVATE-UTC-ACK message while the MS initiated GA-PSR TC activation is in 
progress, the MS shall stop timer TU4002, create and store the corresponding GA-PSR TC information and the MS 
GA-PSR shall transition into GA-PSR-ACTIVE state. The MS GA-PSR shall start TU4001 timer and forward any 
outstanding uplink user data packets. The TU4001 timer is restarted whenever any user data packet is sent to or 
received from the GANC. 

8.2.4 Abnormal Cases 

8.2.4.1 GA-PSR TC Activation Collision 

If the GANC receives a GA-PSR- ACTIVATE-UTC-REQ message from the MS while the network initiated GA-PSR 
TC activation procedure is in progress, the GANC aborts the network initiated activation procedure and responds to the 
MS with the GA-PSR-ACTIVATE-UTC-ACK message including the cause indicating successful activation. The 
message includes GANC IP address and GANC UDP port to be used for the uplink GPRS user data transport. 

If the MS receives a GA-PSR- ACTIVATE-UTC-REQ message from the GANC while the MS initiated GA-PSR TC 
activation procedure is in progress, the MS shall silently discard the request and wait for the acknowledgment related to 
the MS initiated activation already in progress. 

8.2.4.2 Timer TU4002 Expires during GA-PSR TC Activation 

If the TU4002 timer expires, the MS shall treat it as a lower layer failure and act according to sub-clause 9.5. 

8.2.4.3 GANC Receives Duplicate GA-PSR TC Activation Request 

If the GANC receives a GA-PSR TC activation message from the MS with an active GA-PSR TC, it responds with the 
GA-PSR-ACTIVATE-UTC-ACK message to the MS and the cause indicates successful activation. The message 
includes GANC IP address and GANC UDP port allocated to the existing GA-PSR TC. In parallel, if the MS provided 
new UDP port number, the GANC updates the GA-PSR TC attributes accordingly. 

After sending the GA-PSR-ACTIVATE-UTC-ACK message, the GANC 

sets the downlink packet sequence number to and 

sets the expected uplink packet sequence number to 

8.2.4.4 GANC Rejects GA-PSR TC Activation 

If the GANC decides to reject GA-PSR TC activation, it shall send a GA-PSR-ACTIVATE-UTC-ACK message to the 
MS with the failure cause code and shall not include GANC IP address and UDP port number. The following rejection 
cause values are supported: 

"No available resources" indicates that the GANC failed to allocate required resources. 

- "GANC failure" indicates internal GANC failure 

"Not authorized for data service" indicates that the MS is not authorized to use data services via GAN 

Upon receiving the GA-PSR-ACTIVATE-UTC-ACK message indicating failure, the MS shall declare the procedure as 
failed to the upper layers. This failure is equivalent to the lower layer failure in the standard GPRS. 
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8.2.4.5 



MS Aborts GA-PSR TC Activation due to Lower Layer Failure 



If a lower layer failure is detected while waiting for GA-PSR- ACTIVATE-UTC-ACK message, the MS shall declare 
the procedure as failed and send the corresponding indication to upper layers. Further, the MS shall act according to 
sub-clause 9.5. 



8.3 Network Initiated GA-PSR Transport Channel (GA-PSR TC) 
Activation 

The GANG initiated GA-PSR TC activation is triggered by the downlink GPRS user data request when the 
corresponding GA-PSR TC does not exist. The following message flow depicts the messages and timers associated with 
this procedure: 
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Figure 8.3.1 Network initiated GA-PSR TC Activation 

8.3.1 Initiation of the GA-PSR TC Activation by the GANG 

Upon receiving the downlink user data transfer request associated with LLC S API 3, 5, 9 or 11 and if there is no GA- 
PSR TC associated with the specific MS, the GANC allocates the IP address and the UDP port number to be used by 
the MS for GPRS user data transport and sends a GA-PSR-ACTIVATE-UTC-REQ message to the MS. The GANC 
also: 

sets the downlink packet sequence number to and 

sets the expected uplink packet sequence number to 

8.3.2 Processing of the GA-PSR TC Activation Request by the MS 

Upon receiving the GA-PSR-ACTIVATE-UTC-REQ message from the GANC, the MS shall verify the following: 

- the GA-PSR is in GA-PSR-STANDBY state 

- the GA-PSR TC does not exist 

the GPRS service is not suspended 

Assuming successful verification, the MS shall allocate UDP port number for the MS GPRS user data transport and 
store the associated information. In parallel, the MS GA-PSR shall transition to GA-PSR-ACTIVE state and start 
TU4001 timer. Subsequendy, the MS shall send the GA-PSR- ACTIVATE-UTC-ACK message to the GANC with the 
cause indicating successful activation. The message includes the MS UDP port to be used for the downlink GPRS user 
data transport. 

After the MS has sent the GA-PSR-ACTIVATE-UTC-ACK message, it shall: 

set the uplink packet sequence number to and 
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set the expected downlink packet sequence number to 

8.3.3 Processing of the GA-PSR TC Activation Acknowledgment by tine 
GANG 

Upon receiving the GA-PSR-ACTIVATE-UTC-ACK message while the GANG initiated GA-PSR TC activation is in 
progress, the GANG forwards any outstanding downlink user data packets. 

Both uplink and downlink packet sequence number for user data are set to after successful GA-PSR TC activation. 

8.3.4 Abnormal Cases 

8.3.4.1 GA-PSR TC Activation Collision 

If the MS receives a GA-PSR- ACTIVATE-UTC-REQ message from the GANG while the MS initiated GA-PSR TC 
activation procedure is in progress, the MS shall silently discard the request and wait for the acknowledgment related to 
the MS initiated activation already in progress. 

8.3.4.2 MS Rejects GA-PSR TC Activation when the GPRS Service is suspended 

If the MS determines that the GPRS service is suspended when the GA-PSR- ACTIVATE-UTC-REQ is received, it 
shall send a GA-PSR-ACTIVATE-UTC-ACK message to the GANG with the failure cause code set to "GPRS 
Suspended". 

Upon receiving the GA-PSR-ACTIVATE-UTC-ACK message indicating that the GPRS service is suspended, the 
GANG aborts the activation procedure. 

8.3.4.3 MS Receives GA-PSR TC Activation Request while GA-PSR TC active 

If the MS receives a GA-PSR TC activation message from the GANG while the GA-PSR TC is active, it shall send the 
GA-PSR-ACTIVATE-UTC-ACK message to the GANG. The message shall include MS UDP port allocated to the 
existing GA-PSR TC. In parallel, if the GANG provided new IP Address and UDP port number, the MS shall update the 
GA-PSR TC attributes accordingly. 

After sending the GA-PSR-ACTIVATE-UTC-ACK message, the MS shall: 

set uplink packet sequence number to and 

set the expected downlink packet sequence number to 

8.4 MS Initiated Deactivation of GA-PSR Transport Channel 

When the TU400 1 expires, the MS GA-PSR initiates deactivation of the GA-PSR TC by sending the request to the 
GANG as per following message flow: 
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Figure 8.4.1 MS initiated GA-PSR TC Deactivation 

8.4.1 GA-PSR TC Deactivation Initiation by tine MS 

When the TU4001 timer expires and if there are no outstanding upHnk GPRS user data messages to be transferred, the 
MS GA-PSR shall send the GA-PSR-DEACTIVATE-UTC-REQ message to the GANC to request the deactivation of 
the transport channel. In parallel, the MS shall start TU4002 timer to wait for the confirmation. 

8.4.2 Processing of GA-PSR TC Deactivation Request by tine GANC 

Upon receipt of a GA-PSR-DEACTIVATE-UTC-REQ message from the MS, the GANC releases the GA-PSR TC and 
sends the GA-PSR-DEACTIVATE-UTC-ACK message to the MS indicating successful deactivation; i.e. the cause IE 
is set to "success". 

8.4.3 Processing of GA-PSR TC Deactivation Acknowledgment by the MS 

Upon receipt of a GA-PSR-DEACTIVATE-UTC-ACK message from the GANC, the MS GA-PSR shall stop TU4002 
timer, and release the GA-PSR TC In parallel, the MS GA-PSR shall transition to GA-PSR-STANDBY state. 

8.4.4 Abnormal Cases 

8.4.4.1 Timer TU4002 Expires during GA-PSR TC Deactivation 

If the TU4002 timer expires, the MS shall treat it as a lower layer failure and act according to sub-clause 9.5. 

8.4.4.2 GANC Rejects GA-PSR TC Deactivation 

The following scenarios cover the cases when the GANC rejects GA-PSR TC Deactivation: 

If the corresponding GA-PSR TC does not exist on the network side, the GANC responds with a GA-PSR- 
DEACTIVATE-UTC-ACK message indicating successful deactivation. 

If there is outstanding downlink GPRS user data for the specified MS, the GANC forwards the data packets 
instead and ignores the deactivation request. 

8.4.4.3 Uplink User Data Transfer is initiated while GA-PSR TC Deactivation is in 
Progress 

If the MS LLC initiates the uplink user data transfer after the MS GA-PSR has sent the deactivation request to the 
GANC, the MS GA-PSR shall complete the deactivation procedure first and than initiate a new GA-PSR TC activation 
procedure to enable data transfer. 
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8.4.4.4 Downlink User Data Transfer is received while the GA-PSR TC Deactivation 

is in Progress 

If the MS receives any downlink user data packets while waiting for the GA-PSR-DEACTIVATE-UTC-ACK message 
response, it shall abort the deactivation procedure (i.e. stop timer TU4002) and restart TU4001 timer. 



8.4.4.5 



Unexpected GA-PSR-DEACTIVATE-UTC-ACK response 



If the MS receives an unexpected GA-PSR-DEACTIVATE-UTC-ACK message response while the GA-PSR is in GA- 
PSR-ACTIVE state, the MS GA-PSR shall stop TU4001 timer, and release the GA-PSR TC. In parallel, the MS GA- 
PSR shall transition to GA-PSR-STANDBY state. 

If the MS receives an unexpected GA-PSR-DEACTIVATE-UTC-ACK message response while the GA-PSR is in GA- 
PSR-STANDBY state, the message is silently discarded. 



8.4.4.6 



Unexpected GA-PSR-ACTIVATE-UTC-REQ 



If the MS receives an unexpected GA-PSR-ACTIVATE-UTC-REQ message while waiting for GA-PSR- 
DEACTIVATE-UTC-ACK message response, the MS ignores the request and continues waiting for deactivation 
response. 



8.4.4.7 



MS Aborts GA-PSR TC Deactivation due to Lower Layer Failure 



If a lower layer failure is detected while waiting for GA-PSR-DEACTIVATE-UTC-ACK message, the MS shall 
declare the procedure as failed and send the corresponding indication to upper layers. Further, the MS shall act 
according to sub-clause 9.5.. 

8.5 GANG Initiated Deactivation of GA-PSR Transport Channel 

The GANC may initiate the deactivation of the GA-PSR TC by sending the request to the MS as per following message 
flow: 
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GA-PSR DEACTIVATE UTC RED 
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GA-PSR DEACTIVATE UTG ACK 
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GA-PSR 
STANDBY 



















Figure 8.5.1 Network initiated GA-PSR TC Deactivation 

8.5.1 GA-PSR TC Deactivation Initiation by the GANC 

When the GANC decides to deactivate GA-PSR TC channel, it shall send GA-PSR-DEACTIVATE-UTC-REQ 

message to the MS to request the deactivation. 

8.5.2 Processing of GA-PSR TC Deactivation Request by the MS 

Upon receipt of a GA-PSR-DEACTIVATE-UTC-REQ message from the GANC, the MS shall release the GA-PSR TC 
and send the GA-PSR-DEACTIVATE-UTC-ACK message to the GANC indicating successful deactivation; i.e. the 
cause IE is set to "success". In parallel, the MS GA-PSR shall transition to GA-PSR-STANDBY state. 
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8.5.3 Processing of GA-PSR TC Deactivation Acl^nowledgment by tlie 
GANG 

Upon receipt of a GA-PSR-DEACTIVATE-UTC-ACK message from the MS, the GANG shall release the GA-PSR 
TC. 

8.5.4 Abnormal Cases 

8.5.4.1 MS Rejects GA-PSR TC Deactivation 

The following scenarios cover the cases when the MS rejects GA-PSR TC Deactivation: 

- If the corresponding GA-PSR TC does not exist on the MS side, the MS shall respond with a GA-PSR- 
DEACTIVATE-UTC-ACK message indicating successful deactivation. 

If there is outstanding uplink GPRS user data, the MS forwards the data packets instead and ignores the 
deactivation request. 

8.5.4.2 Uplink User Data Transfer is received while GA-PSR TO Deactivation is in 
Progress 

If the MS LLC initiates the uplink user data transfer after the MS has received a deactivation request from the GANC, 
the MS shall complete the deactivation procedure first and than initiate a new GA-PSR TC activation procedure to 
enable data transfer. 

If the MS LLC initiates the uplink user data transfer before the MS has received a deactivation request from the GANC, 
the MS shall treat that as normal uplink user data transfer as defined in sub-clause 8.7.1. 

8.5.4.3 Downlink User Data Transfer is initiated while the GA-PSR TO Deactivation 
is in Progress 

If the GANC receives any downlink user data packets while waiting for the GA-PSR-DEACTIVATE-UTC-ACK 
response, it shall complete the deactivation procedure first and than initiate a new GA-PSR TC activation procedure to 
enable data transfer. 

8.6 Implicit Deactivation of GA-PSR Transport Channel 

If the GAN deregistration is performed for a mobile station with an active GA-PSR TC, the GANC automatically 
releases the associated GA-PSR TC. The MS shall release the GA-PSR TC and the MS GA-PSR shall enter GA-PSR- 
SERVICE-DET ACHED state upon GAN deregistration. 

This includes the scenarios where an implicit GAN deregistration is performed by either the MS or GANC due to lower 
layer failures. 

8.7 GA-PSR GPRS User Data Transport 

While the corresponding GA-PSR TC is available, both mobile station and GANC can initiate GPRS user data transfer 
automatically using GA-PSR UNITDATA service as illustrated in the following figure: 
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MS 



GANG 



GA-PSR-UNITDATA 



GA-PSR- UNITDATA 



Figure 8.7.1 GA-PSR GPRS User Data transport 

The GPRS user data packets are tunnelled using UDP transport as specified for GA-PSR Transport Channel. Each 
packet is assigned a sequence number in the range of to 65535 sequentially. The sequence number is set to after 
reaching the maximum - 65535. 

8.7.1 MS Initiates Uplinl< GPRS User Data Transfer 

Assuming that the GA-PSR TC has been already activated as specified in sub-clauses 8.2 or 8.3, the MS GA-PSR is 
able to immediately forward any uplink GPRS user data packets to the GANG. Upon the request from the LLC to 
transfer an uplink LLC PDU with GPRS user data identified with LLC SAPI 3, 5, 9 or 1 1, the MS GA-PSR shall restart 
TU4001 timer and encapsulate the complete LLC PDU within a GA-PSR UNITDATA message. 

Subsequently, the MS shall send the GA-PSR UNITDATA message to the GANG using the existing GA-PSR TC; i.e. 
using the corresponding GANG IP address and UDP port number. 

The MS shall increment the uplink packet sequence number for each GA-PSR-UNITDATA message sent to the GANG. 

8.7.2 Processing of tine Uplink GPRS User Data Message by the GANG 

Upon receiving the uplink user data message from the MS, the GANG extracts the received LLC PDU and available 
message parameters, relays the PDU to the SGSN via the Gb interface using the BSSGP uplink unitdata procedure as 
per standard GPRS. 

The GANG increments the expected uplink packet sequence number for each GA-PSR-UNITDATA message received 
from the MS. 

8.7.3 GANG Initiates Downlink GPRS User Data Transfer 

Assuming that the GA-PSR TC has been already activated as specified in sub-clause 8.2 or 8.3, the GANG is able to 
immediately forward any downlink GPRS user data packets to the MS. Upon receiving a downlink packet for the MS, 
the GANG sends the GA-PSR UNITDATA message to the MS using the existing GA-PSR TC; i.e. using the 
corresponding MS IP address and UDP port number. 

The GANG increments the downlink packet sequence number for each GA-PSR-UNITDATA message sent to the MS. 

8.7.4 Processing of the Downlink GPRS User Data Message by the MS 

Upon receiving the downlink user data message from the GANG, the MS GA-PSR shall restart TU4001 timer, extract 
the received LLC PDU and TLLI and forward the PDU to the LLC layer via the GRR SAP as per standard GPRS. 

The MS shall increment the expected downlink packet sequence number for each GA-PSR-UNITDATA message 
received from the GANG. 
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8.7.5 Abnormal Cases 

8.7.5.1 GANG Receives an Uplink User Data Message while the GA-PSR TG 
Activation Procedure is in progress 

Upon receiving an uplink message while the GA-PSR TC activation procedure is in progress (TU4002 timer is still 
running), the GANG will process the request as if the GA-PSR TC was active. 

8.7.5.2 GANG Receives an Uplink User Data Message and the GA-PSR TG is not 
active 

Upon receiving an uplink message that is associated with a GA-PSR TC that does not exist, the GANG will process the 
message as defined in sub-clause 8.7.2. The GANG may disregard the uplink packet sequence number in this case. 
Further, the GANG initiates GA-PSR TC activation procedure as defined in sub-clause 8.3. 

8.7.5.3 Handling of out-of-sequence packets 

Packets received out-of-sequence should be dropped. 

8.7.5.4 MS Receives a Downlink Message while the GA-PSR TG Activation 
Procedure is in progress 

Upon receiving a downlink message while the GA-PSR TC activation procedure is in progress (TU4002 timer is still 
running), the MS GA-PSR shall process the request as if the transport channel was active. 



8.7.5.5 



Uplink User Data Transfer Failed due to Lower Layer Failure 



If a lower layer failure is detected while attempting to send an uplink user data packet, the MS shall declare the 
procedure as failed and send the corresponding indication to upper layers. 

8.8 GA-PSR GPRS Signalling and SIVIS IVIessages Transport 

While the MS is registered for GAN services, the corresponding TCP session for signalling transport is always available 
and, assuming that the MS GA-CSR and GA-PSR are attached to GSM/GPRS SAPs, both mobile station and GANG 
can initiate GPRS signalling message transfer using GA-PSR DATA service as illustrated in the following figure. The 
GA-PSR-DATA transport mechanism is utihzed for all GPRS GMM/SM signalling and SMS messages. 



MS 



GANG 



GA-PSR-DATA 



GA-PSR DATA 



Figure 8.8.1 GA-PSR GPRS Signalling and SMS Messages transport 

8.8.1 IVIS Initiates Uplink GPRS Signalling/SIVIS IVIessage Transfer 

Upon the request form the LLC to transfer an uplink LLC PDU carrying GPRS signalling message (identified with LLC 
SAP! 1) or GPRS SMS message (LLC SAP! 7), the MS GA-PSR shall encapsulate the complete LLC PDU within a 
GA-PSR DATA message and send the message to the GANG using the existing signalling TCP session. 
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8.8.2 Processing of the Uplink GA-PSR DATA Message by tine GANG 

Upon receiving the uplink GA-PSR DATA message from the MS, the GANG extracts the received LLC PDU and 
available message parameters and, relays the PDU to the SGSN via the Gb interface using the BSSGP uplink unitdata 
procedure as per standard GPRS. 

8.8.3 GANG Initiates Downlink GA-PSR DATA Transfer 

Upon receiving a downUnk LLC PDU with GPRS signalling (identified with LLC SAPI 1) or SMS message (LLC 
SAPI 7), the GANG encapsulates the complete LLC PDU within a GA-PSR DATA message and sends the message to 
the MS using the existing signalling TCP session. 

8.8.4 Processing of the Downlink GA-PSR DATA Message by the MS 

Upon receiving the GA-PSR-DATA message that includes the downlink GPRS signalling or SMS LLC PDU from the 
GANG, the MS shall extract the received LLC PDU and TLLI and forward the PDU to the LLC layer via the GRR SAP 
as per standard GPRS. 

8.8.5 Abnormal Cases 



8.8.5.1 



Downlink or Uplink User Data Transfer Failed due to Lower Layer Failure 



If a lower layer failure is detected while attempting to send an uplink GPRS signalling or SMS message, the MS GA- 
PSR shall act according to sub-clause 9.5. 

8.9 Packet paging for packet service 

The following figure depicts interactions involved in the packet paging procedure via GAN. 
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Figure 8.9.1 Packet Paging 

8.9.1 PS Paging Request Processing by the GANG 

Upon receiving a Paging PS request from the SGSN for GAN registered MS, the GANG sends the GA-PSR-PS-PAGE 

message to the MS via the signalling TCP session. 

8.9.2 PS Paging Request Processed by the MS 

Upon receiving a GA-PSR-PS-PAGE message from the GANG, the MS GA-PSR shall forward the indication to the 
GMM layer using the GMMRR SAP as per standard GPRS. Subsequently, the MS shall send an uplink LLC PDU as a 
page response per standard GPRS. The MS may either send GA-PSR-DATA or GA-PSR-UNITDATA message as 
described in sub-clauses 8.7 and 8.8. 
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8.9.3 Processing of the PS Paging Response by tine GANG 

Since the MS responds to a PS Paging with any LLC PDU encapsulated within the standard GA-PSR-DATA or GA- 
PSR-UNITDATA message, the GANG will process the message as any other GPRS signalling/SMS or user data 
message. The processing of uplink GPRS data messages is described in sub-clause 8.7 and for the uplink GPRS 
signalling messages in sub-clause 8.8. 

8.10 GPRS Suspend Procedure 

The following figure depicts interaction involved in the GPRS Suspend procedure. 
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GA-PSR -GPRS-SUSPENSIOIM-REQUEST 
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Figure 8.10.1 GPRS Suspend 

8.1 0.1 GPRS Suspension Initiation by the MS 

While transitioning to dedicated mode and if unable to support simultaneous CS and PS services, the MS shall request 
the suspension of the downlink GPRS data transfer by sending a GA-PSR GPRS SUSPENSION REQUEST message to 
the GANG 

8.1 0.2 GPRS Suspend Request Processing by the GANG 

Upon receiving a GA-PSR GPRS SUSPENSION REQUEST message from the MS, the GANG completes the GPRS 
suspend procedure via the Gb interface as defined in [3GPP 48.018]. 

8.1 1 MS Initiated Downlink Flow Control 

The MS initiated downlink flow control procedure is based on standard GPRS downlink flow control mechanism 
enhanced for GAN service. The MS implements the flow control algorithm to monitor and calculate the data rate that 
could be supported based on the current conditions. When the flow control condition is detected (e.g. the utilization of 
the buffers reaches a high watermark level), the MS re-calculates the estimated data rate that could be supported and 
sends the flow control request to the GANG to adjust the data rate accordingly. The following message flow depicts the 
messages and timers associated with this procedure: 



MS 



start TU4003 



GANG 



GA-PSR-DFC-REQ 



Figure 8.11.1 IVIS initiated Downlinit Flow Control 

Initially, before detecting a flow control condition, the flow control condition does not exist in the MS. In this state, the 
MS GA-PSR monitors the average downlink data rate and the utilization of resources (e.g. downlink buffers), and when 
utilization exceeds a certain threshold, a downlink flow control condition is detected. 

When the downlink flow control condition is detected, the MS sends the GA-PSR-DFC-REQ message to the GANG 
and starts the TU4003 timer. Whenever the timer expires, the MS checks the downlink flow control condition, and if it 
continues to exist, the MS restarts the timer, and sends another GA-PSR-DFC-REQ message to the GANG. The MS 
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remains in this state while the flow control condition persists. As soon as the flow control condition is resolved, the MS 
deactivates the TU4003 timer and transitions to the default state in which no downlink flow control condition exists. 

8.11 .1 Initiation of tine Downlink Flow Control by the MS 

Upon detecting the downlink flow control condition, the MS shall initiate a downlink flow control procedure by sending 
a GA-PSR-DFC-REQ message to the GANG via the existing GA-PSR TG. The message includes new estimated data 
rate that can be supported. At the same time the MS shall start timer TU4003 to continue monitoring the flow control 
condition. The timer TU4003 is specified in sub-clause 12. 

8.1 1 .2 Processing of the Downlink Flow Control Request by the GANC 

Upon receiving the GA-PSR-DFG-REQ message from the MS, the GANG initiates downlink flow control procedure 
over the Gb interface as per standard GPRS. 

8.1 1 .3 Processing of the TU4003 Timer Expiry by the MS 

When the TU4003 timer expires, the MS shall re-evaluate the flow control condition and perform the following based 
on the outcome of the evaluation: 

If the flow control condition still exists (e.g. downlink buffer utilization is still above the low watermark level), 
the MS shall calculate a new data rate that can be supported and forward the corresponding GA-PSR-DFG-REQ 
message to the GANG via the existing GA-PSR TG. Simultaneously, the MS shall start timer TU4003 to 
continue monitoring the downlink data transfer. 

If the flow condition has been resolved (e.g. buffer utilization is below the low mark level), the MS shall not 
restart the TU4003 timer and shall stop sending flow control requests to the GANG. 

8.12 Uplink Flow Control 

The uplink flow control procedure is used to dynamically manage sharing of the available Gb interface bandwidth. The 
following message flow depicts the messages and timers associated with this procedure: 
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Figure 8.12.1 Uplink Flow Control 

Upon receiving the request, the MS GA-PSR adjusts the uplink data rate as per request. 

8.1 2.1 Initiation of the Uplink Flow Control by the GANC 

Upon detecting the uplink flow control condition, the GANG initiates an uplink flow control procedure by sending a 
GA-PSR-UFG-REQ message to the MS via the existing GA-PSR TG. The request is PFG based if the packet flow 
management procedures are supported. 

The GANG shall never request the uplink data rate that is lower than the guaranteed uplink bit rate specified for that 
PFG. The guaranteed bit rate can be ignored by the GANG if the Traffic Glass is Interactive class or Background class. 

8.1 2.2 Processing of the Uplink Flow Control Request by the MS 

Upon receiving the GA-PSR-UFG-REQUEST message from the GANG, the MS adjusts the uplink data rate 
accordingly. 
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8.1 2.3 Resetting of the Uplink Flow Control Condition by the GANC 

After the uplink flow control condition is resolved and the current conditions allow the uplink data rate to be reset to 
normal level, the GANC initiates an uplink flow control condition reset by sending a GA-PSR-UFC-REQUEST 
message to the MS via the existing GA-PSR TC. This message includes the reset indicator. 

8.12.4 Abnormal Cases 

8.12.4.1 GA-PSR TC Deactivation is in Progress 

If the MS receives a GA-PSR-UFC-REQUEST message while the GA-PSR TC deactivation is in progress, the MS shall 
ignore the flow control request. 



Error handling procedures 



9.1 General 



The procedures specified in this specification apply to those messages which pass the checks described in this sub- 
clause. 

This sub -clause also specifies procedures for the handling of unknown, unforeseen, and erroneous protocol data by the 
receiving entity. These procedures are called "error handling procedures", but in addition to providing recovery 
mechanisms for error situations they define a compatibility mechanism for future extensions of the protocols. 

Sub-clauses 9.2 to 9.4 shall be applied in order of precedence. 

In this sub-clause the following terminology is used: 

An IE is defined to be syntactically incorrect in a message if it contains at least one value defined as "reserved" 
in sub-clause 1 1, or if its value part violates rules of clause 11. However it is not a syntactical error that an IE 
specifies in its length indicator a greater length than defined in clause 1 1 . 

A message is defined to have semantically incorrect contents if it contains information which, possibly 
dependent on the state of the receiver, is in contradiction to the resources of the receiver and/or to the procedural 
part of this specification. 

The procedures below apply to both GA-CSR and GA-PSR messages, unless explicitly specified otherwise. 



9.2 Message too short 



When a message is received that is too short to contain a complete message header and all the mandatory information 
elements, that message shall be ignored. 

9.3 Invalid Message Header 

If the MS receives a message over UDP with message type not defined or not implemented, it shall ignore the message. 

If the MS receives a message over TCP with protocol discriminator not defined or not implemented, it shall ignore the 

message. 

If the MS receives a message with Skip Indicator IE not encoded as 0000 or Length IE greater than 2048, it shall ignore 
the message. 

If the MS receives a message over TCP with message type not defined for the specific PD (GA-CSR or GA-PSR) or not 
implemented, it shall return a GA-CSR STATUS or GA-PSR STATUS respectively, with cause "message type non- 
existent or not implemented". 
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If the MS receives a message not compatible with the protocol state, the MS shall ignore the message and shall return a 
(GA-CSR or GA-PSR) STATUS message with cause "Message type not compatible with protocol state". 

9.4 Invalid Information Elements 

If the MS receives a GA-RC OR GA-CSR OR GA-PSR message with a missing or syntactically incorrect mandatory 
IE, the MS shall ignore the message and shall return a (GA-RC or GA-PSR) STATUS message with cause "Invalid 
mandatory information". In addition, if the message was a GA-RC RELEASE message, the actions taken shall be the 
same as specified in sub-clause 7.4. 

The MS shall ignore all unknown lEs in received messages. 

The MS shall treat all optional lEs that are syntactically incorrect in a message as not present in the message. 

If the MS diagnoses a missing or unexpected conditional IE or when it receives at least one syntactically incorrect 
conditional IE, it shall ignore the message and shall return a (GA-RC or GA-PSR) STATUS message with cause value 
"conditional IE error". 

If the MS receives a message with semantically incorrect contents, it shall ignore the message and shall return a (GA- 
RC or GA-PSR) STATUS message with cause value "semantically incorrect message". 

9.5 Handling of lower layer faults 

The handling of lower layer failures in the MS while in the GA-RC -DEREGISTERED state is described in sub-clauses 
5.6.2 and 6.2.4.2. 

The handling of lower layer failures in the MS while not in the GA-RC-DEREGISTERED state is described below: 

For all lower layer failures in the MS (for example related to DNS, IPsec or TCP failures other than RST) except the 
TCP connection failure specified in section 6.6, the MS shall: 

release the TCP connection towards the current GANC, if established, 

release the secure connection towards SEGW of the current GANC, if established, as defined in sub-clause 4.5, 

- start timer TU3905, and 

- enter GA-RC-DEREGISTERED state. 

9.6 Out of sequence lEs 

The MS shall ignore all out of sequence lEs in a message. The network should take the same approach. 

1 Message functional definitions and contents 
1 0.1 Messages for Generic Resources management 

Table 10. 1.1 summarizes the messages for Generic Resources management. 
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Table 10.1.1 : Messages for Unlicensed Radio Resources management 



Discovery messages: 


Reference 


GA-RC DISCOVERY REQUEST 


10.1.2 


GA-RC DISCOVERY ACCEPT 


10.1.3 


GA-RC DISCOVERY REJECT 


10.1.4 


Registration messages: 


Reference 


GA-RC REGISTER REQUEST 


10.1.5 


GA-RC REGISTER ACCEPT 


10.1.6 


GA-RC REGISTER REDIRECT 


10.1.7 


GA-RC REGISTER REJECT 


10.1.8 


GA-RC DEREGISTER 


10.1.9 


GA-RC REGISTER UPDATE UPLINK 


10.1.10 


GA-RC REGISTER UPDATE DOWNLINK 


10.1.11 


GA-CSR connection establishment messages: 


Reference 


GA-CSR REQUEST 


10.1.12 


GA-CSR REQUEST ACCEPT 


10.1.13 


GA-CSR REQUEST REJECT 


10.1.24 


Ciphering messages: 


Reference 


GA-CSR CIPHERING MODE COMMAND 


10.1.35 


GA-CSR CIPHERING MODE COMPLETE 


10.1.36 


Traffic Channel establishment messages: 


Reference 


GA-CSR ACTIVATE CHANNEL 


10.1.15 


GA-CSR ACTIVATE CHANNEL ACK 


10.1.16 


GA-CSR ACTIVATE CHANNEL COMPLETE 


10.1.18 


GA-CSR ACTIVATE CHANNEL FAILURE 


10.1.17 


GA-CSR CHANNEL MODE MODIFY 


10.1.40 


GA-CSR CHANNEL MODE MODIFY ACKNOWLEDGE 


10.1.41 


Channel release messages: 


Reference 


GA-CSR RELEASE 


10.1.19 


GA-CSR RELEASE COMPLETE 


10.1.20 


GA-CSR CLEAR REQUEST 


10.1.37 


[Handover messages: 


Reference 


GA-CSR HANDOVER ACCESS 


10.1.29 


GA-CSR HANDOVER COMPLETE 


10.1.30 


GA-CSR UPLINK QUALITY INDICATION 


10.1.31 


GA-CSR HANDOVER INFORMATION 


10.1.32 


GA-CSR HANDOVER COMMAND 


10.1.33 


GA-CSR HANDOVER FAILURE 


10.1.34 


Paging messages: 


Reference 


GA-CSR PAGING REQUEST 


10.1.21 


GA-CSR PAGING RESPONSE 


10.1.22 


Miscellaneous message: 


Reference 


GA-CSR UPLINK DIRECT TRANSFER 


10.1.23 


GA-CSR DOWNLINK DIRECT TRANSFER 


10.1.25 


GA-CSR CLASSMARK ENQUIRY 


10.1.26 


GA-CSR CLASSMARK CHANGE 


10.1.27 


GA-CSR STATUS 


10.1.28 


GA-RC KEEP ALIVE 


10.1.14 


GA-CSR GPRS SUSPENSION REQUEST 


10.1.38 


GA-RC SYNCHRONIZATION INFORMATION 


10.1.39 


GA-RC CELL BROADCAST INFO 


10.1.14a 


GA-CSR UTRAN CLASSMARK CHANGE 


10.1.42 



10.1.1 void 

10.1.2 GA-RC DISCOVERY REQUEST 

The MS transmits this message to the Provisioning GANC in order to obtain the address information of a Default 
GANG. 



Direction: 



MS to GANC 
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Table 10.1.2.1 : GA-RC DISCOVERY REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC DISCOVERY 
REQUEST Message 
Type 


IVIessage Type 
11.1.1.4 


M 


V 


1 






1 


IMSI 


Mobile Identity 
11.2.1 


M 


TLV 


10 






2 


GAN Release 
Indicator 


GAN Release 

Indicator 

11.2.2 


M 


TLV 


3 






7 


GAN Classmark 


GAN Classmark 
11.2.7 


M 


TLV 


4 






3 


AP Radio Identity 


Radio Identity 
11.2.3 


C 


TLV 


9 






6 


GERAN/UTRAN 
coverage Indication 


GERAN/UTRAN 
coverage Indicator 
11.2.6 


M 


TLV 


3 






4 


GERAN Cell Identity 


GERAN Cell 

Identity 

11.2.4 


C 


TLV 


4 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


C 


TLV 


n 






41 


Routing Area Code 


Routing Area Code 
11.2.41 


C 


TLV 


n 






21 


Register Reject 
Cause 


Register reject 

Cause 

11.2.21 


C 


TLV 


3 






11 


Redirection Counter 


Redirection 

Counter 

11.2.11 


C 


TLV 


3 






9 


Default GANC-SEGW 
IP address 


IP Address 
11.2.9 


C 


TLV 


7-19 






10 


Default GANC-SEGW 
FQDN 


Fully Qualified 
Domain/Host Name 
11.2.10 


C 


TLV 


5-258 






97 


Default GANC IP 
address 


IP Address 
11.2.9 


C 


TLV 


7-19 






98 


Default GANC FQDN 


Fully Qualified 
Domain/Host Name 
11.2.10 


C 


TLV 


5-258 






73 


3G Cell Identity 


3G Cell Identity 
11.2.73 


C 


TLV 


6 







10.1.2.1 AP Radio Identity 

The AP Radio identity shall be included if the MS connects via an AP over the unlicensed radio. 

10.1.2.2 Cell Identity 

The GERAN Cell Identity shall be included, if the MS is in an area with GSM Coverage. The GERAN Cell Identity is 
retrieved from the GSM System information. If the GERAN Cell Identity information element is included, it is not 
permitted to include the 3G Cell Identity information element. 
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1 0.1 .2.3 Location Area Identification 

The most recent Location Area Identification shall be included, if available in the MS. Following cases are identified: 

Normal service or limited service over GERAN/UTRAN. 

In this case the LAI received in the GERAN or UTRAN System Information is included. 

- MS has not found GERAN/UTRAN coverage. 

In this case the LAI is taken from the SIM, if available. 

10.1.2.4 Routing Area Code 

The Routing Area Code (RAC) shall be included, if available in the MS. Following cases are identified: 

- Normal service over GERAN or UTRAN with GPRS support 

In this case the RAC received in the GERAN or UTRAN System Information is included. 

- MS has not found GERAN/UTRAN coverage 

In this case the RAC is taken from the SIM, if available. 

Normal service over GERAN/UTRAN without GPRS support or limited service 
The RAC is not included. 

1 0.1 .2.5 Register Reject Cause 

The Register Reject Cause shall be included if 

The MS reattempts GA-RC Discovery Request after failing to connect to the default GANC. 

10.1.2.6 Redirection Counter 

The Redirection Counter IE shall be included if Register Reject Cause IE is included. 

1 0.1 .2.7 Default GANC-SEGW IP address 

The conditional IE Default GANC-SEGW IP address shall be included if the conditional IE Default GANC-SEGW 
FQDN is not included. It is not permitted to include both Default GANC-SEGW IP address and Default GANC-SEGW 
FQDN in the same message. One of these lEs shall be included if Register Reject Cause IE is included. 

1 0.1 .2.8 Default GANC-SEGW FQDN 

The conditional IE Default GANC-SEGW FQDN shall be included if the conditional IE Default GANC-SEGW IP 
address is not included. It is not permitted to include both Default GANC-SEGW IP address and Default GANC-SEGW 
FQDN in the same message. One of these lEs shall be included if Register Reject Cause IE is included. 

1 0.1 .2.9 Default GANC IP address 

The conditional IE Default GANC IP address shall be included if the conditional IE Default GANC FQDN is not 
included. It is not permitted to include both Default GANC IP address and Default GANC FQDN in the same message. 
One of these lEs shall be included if Register Reject Cause IE is included. 

10.1.2.10 Default GANC FQDN 

The conditional IE Default GANC FQDN shall be included if the conditional IE Default GANC IP address is not 
included. It is not permitted to include both Default GANC IP address and Default GANC FQDN in the same message. 
One of these lEs shall be included if Register Reject Cause IE is included. 
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10.1.2.11 3G Cell Identity 

The 3G Cell Identity shall be included, if the MS is in an area with UTRAN Coverage. The 3G Cell Identity is retrieved 
from the UTRAN System information. If the 3G Cell Identity information element is included, it is not permitted to 
include the GERAN Cell Identity information element. 

1 0.1 .3 GA-RC DISCOVERY ACCEPT 

The Provisioning GANC sends information of the Default GANC and SEGW associated with the Default GANC the 
MS should use. 



Direction: 



GANC to MS 



Table 10.1.3.1 : GA-RC DISCOVERY ACCEPT message content' 



lEI 


Information 
Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vz 


0000 






GA-RC DISCOVERY 
ACCEPT Message 
Type 


Message Type 
11.1.1.4 


M 


V 


1 






9 


Default GANC- 
SEGW IP address 


IP Address 
11.2.9 


C 


TLV 


7-19 






10 


Default GANC- 
SEGW FQDN 


Fully Qualified 
Domain/Host 
Name 
11.2.10 


C 


TLV 


5-258 






97 


Default GANC IP 
address 


IP Address 
11.2.9 


c 


TLV 


7-19 






98 


Default GANC FQDN 


Fully Qualified 
Domain/Host 
Name 
11.2.10 


c 


TLV 


5-258 






103 


GANC TCP port 
number 


Communication 

port 

11.2.25 


Q 


TLV 


4 







10.1.3.1 



Default GANC-SEGW IP address 



The conditional IE Default GANC-SEGW IP address shall be included if the conditional IE Default GANC-SEGW 
FQDN is not included. It is not permitted to include both Default GANC-SEGW IP address and Default GANC-SEGW 
FQDN in the same message. 



10.1.3.2 



Default GANC-SEGW FQDN 



The conditional IE Default GANC-SEGW FQDN shall be included if the conditional IE Default GANC-SEGW IP 
address is not included. It is not permitted to include both Default GANC-SEGW IP address and Default GANC-SEGW 
FQDN in the same message. 



10.1.3.3 



Default GANG IP address 



The conditional IE Default GANC IP address shall be included if the conditional IE Default GANC FQDN is not 
included. It is not permitted to include both Default GANC IP address and Default GANC FQDN in the same message. 
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10.1.3.4 



Default GANG FQDN 



The conditional IE Default GANG FQDN shall be included if the conditional IE Default GANG IP address is not 
included. It is not permitted to include both Default GANG IP address and Default GANG FQDN in the same message. 

10.1.4 GA-RC DISCOVERY REJECT 

The Provisioning GANG rejects the Discovery Request from the MS. 
Direction: GANG to MS 

Table 10.1.4.1 : GA-RC DISCOVERY REJECT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


'h 


0000 






GA-RC DISCOVERY 
REJECT IVIessage 
Type 


IVIessage Type 
11.1.1.4 


M 


V 


1 






12 


Discovery Reject 
Cause 


Discovery Reject 

Cause 

11.2.12 


M 


TLV 


3 






24 


TU3902 Timer 


TU3902 Timer 
11.2.24 


C 


TLV 


4 







10.1.4.1 TU3902 Timer 

The TU3902 Timer IE shall be included if the Discovery Reject Gause 'Network Gongestion' is returned to the MS. 

10.1.5 GA-RC REGISTER REQUEST 

The MS registers with the GANG in order to establish a MS context in the GANG and receive the needed GAN system 
information. The MS also uses this message to request a list of PLMN identities, when the MS is in manual PLMN 
selection mode. 



Direction: 



MS to GANG 
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Table 10.1.5.1: GA-RC REGISTER REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC REGISTER 
REQUEST message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






1 


IMSI 


Mobile Identity 
11.2.1 


M 


TLV 


10 






2 


GAN Release 
Indicator 


GAN Release 

Indicator 

11.2.2 


M 


TLV 


3 






7 


GAN Classmark 


GAN Classmark 
11.2.7 


M 


TLV 


4 






3 


AP Radio Identity 


Radio Identity 
11.2.3 


C 


TLV 


9-n 






96 


MS Radio identity 


Radio Identity 
11.2.3 


M 


TLV 


9-n 






17 


GSM RR/UTRAN 
RRC State 


GSM RR/ UTRAN 
RRC State 
11.2.17 


M 


TLV 


3 






6 


Coverage Indication 


GERAN/UTRAN 
coverage Indicator 
11.2.6 


M 


TLV 


3 






4 


GERAN Cell Identity 


GERAN Cell 

Identity 

11.2.4 


C 


TLV 


4 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


C 


TLV 


7 






41 


Routing Area Code 


Routing Area 

Code 

11.2.41 


c 


TLV 


3 






8 


Geographic Location 


Geographical 

Location 

11.2.8 





TLV 


9-n 






42 


AP location 


AP Location 
11.2.42 





TLV 


7-n 






21 


Register Reject 
Cause 


Register reject 

Cause 

11.2.21 


c 


TLV 


3 






11 


Redirection Counter 


Redirection 

Counter 

11.2.11 


c 


TLV 


3 






9 


Last GANC-SEGW IP 
address 


IP Address 
11.2.9 


c 


TLV 


7-19 






10 


Last GANC-SEGW 
FQDN 


Fully Qualified 
Domain/Host 
Name 
11.2.10 


c 


TLV 


5-258 






97 


Last GANC IP 
address 


IP Address 
11.2.9 


c 


TLV 


7-19 






98 


Last GANC FQDN 


Fully Qualified 
Domain/Host 
Name 
11.2.10 


c 


TLV 


5-258 






61 


AP Service Name 


AP Service Name 
11.2.61 


c 


TLV 


4-67 






68 


Registration indicators 


Registration 

Indicators 

11.2.68 


c 


TLV 


3 







£75/ 



3GPP TS 44.318 version 6.1.0 Release 6 



71 



ETSI TS 144 318 V6.1 .0 (2005-07) 



69 


GAN PLMN List 


GAN PLMN List 
11.2.69 





TLV 


n 






71 


Required GAN 
Services 


Required GAN 

Services 

11.2.71 





TLV 


3 






73 


3G Cell Identity 


3G Cell Identity 
11.2.73 





TLV 


6 







10.1.5.1 GERAN Cell Identity 

The GERAN Cell Identity shall be included, if the MS is in an area with GSM Coverage. The GERAN Cell Identity is 
retrieved from the GSM System information. If the GERAN Cell Identity information element is included, it is not 
permitted to include the 3G Cell Identity information element. 

1 0.1 .5.2 Location Area Identification 

The most recent Location Area Identification shall be included, if available in the MS. Following cases are identified: 

Normal service or limited service over GERAN/UTRAN 

In this case the LAI received in the GERAN/UTRAN System Information is included. 

- MS has not found GERAN/UTRAN coverage 

In this case the LAI is taken from the SIM, if available. 

10.1.5.3 Routing Area Code 

The Routing Area Code (RAC) shall be included, if available in the MS. Following cases are identified: 

- Normal service over GERAN/UTRAN with GPRS support 

In this case the RAC received in the GSM System Information is included. 

- MS has not found GERAN/UTRAN coverage 

In this case the RAC is taken from the SIM, if available. 

Normal service over GERAN/UTRAN without GPRS support or limited service 
The RAC is not included. 

1 0.1 .5.4 Register Reject Cause 

The Register Reject Cause shall be included if the MS reattempts GA-RC Register Request after failing to connect to a 
Serving GANG. 

10.1.5.5 Redirection Counter 

The Redirection Counter IE shall be included if Register Reject Cause IE is included. 



10.1.5.6 



Last GANC-SEGW IP address 



The conditional IE Last GANC-SEGW IP address shall be included if the conditional IE Serving GANC-SEGW FQDN 
is not included. It is not permitted to include both Serving GANC-SEGW IP address and Serving GANC-SEGW FQDN 
in the same message. One of these lEs shall be included if Register Reject Cause is included. 



10.1.5.7 



Last GANC-SEGW FQDN 



The conditional IE Last GANC-SEGW FQDN shall be included if the conditional IE Serving GANC-SEGW IP address 
is not included. It is not permitted to include both Serving GANC-SEGW IP address and Serving GANC-SEGW FQDN 
in the same message. One of these lEs shall be included if Register Reject Cause is included. 
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1 0.1 .5.8 Last GANG IP address 

The conditional IE Last GANC IP address shall be included if the conditional IE Serving GANG FQDN is not included. 
It is not permitted to include both Serving GANC IP address and Serving GANC FQDN in the same message. One of 
these lEs shall be included if Register Reject Cause is included. 

10.1.5.9 Last GANG FQDN 

The conditional IE Last GANC FQDN shall be included if the conditional IE Serving GANC IP address is not included. 
It is not permitted to include both Serving GANC IP address and Serving GANC FQDN in the same message. One of 
these lEs shall be included if Register Reject Cause is included. 

10.1.5.10 AP Radio Identity 

The AP Radio identity shall be included if the MS connects via an AP over the unlicensed radio. 

10.1.5.11 AP Service Name 

The AP Service Name shall be included, if available, and if the MS connects via an AP over the unlicensed radio. 

10.1.5.12 Registration Indicators 

The MS shall include this information element when attempting to register to the Default GANC. The presence of this 
Information Element indicates to the GANC that it is the Default GANC for that MS. 

10.1.5.13 GAN PLMN List 

The GAN PLMN List information element shall be included only when attempting to register with the Default GANC 
and if no more PLMNs can be selected from the GAN PLMN List received from the Default GANC. 

10.1.5.14 3G Gell Identity 

The 3G Cell Identity shall be included, if the MS is in an area with UTRAN Coverage. The 3G Cell Identity is retrieved 
from the UTRAN System information. If the 3G Cell Identity information element is included, it is not permitted to 
include the GERAN Cell Identity information element. 

1 0.1 .6 GA-RC REGISTER ACCEPT 

The GANC provides system information to the MS using this message. The contents of this message are a collection of 
lEs from system information 3 and 13 of GERAN specifications plus some additions. 

Direction: GANC to MS 
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Table 10.1.6.1 : GA-RC REGISTER ACCEPT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Sl<ip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC REGISTER 
ACCEPT message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






4 


Cell Identity 


Cell Identity 
11.2.4 


M 


TLV 


4 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


M 


TLV 


7 






14 


GANC Control 
Channel Description 


GAN Control 
Channel 
Description 
11.2.14 


M 


TLV 


8 






23 


TU3910 Timer 


TU3910 Timer 
11.2.23 


M 


TLV 


4 






22 


TU3906 Timer 


TU3906 Timer 
11.2.22 


M 


TLV 


4 






19 


GAN Band 


GAN Band 
11.2.19 


M 


TLV 


3 






37 


TU3920 Timer 


TU3920 Timer 
11.2.37 


M 


TLV 


4 






13 


GANC Cell 
Description 


GAN Cell 

Description 

11.2.13 





TLV 


4 






43 


TU4001 Timer 


TU4001 Timer 
11.2.43 


C 


TLV 


4 






60 


TU4003 Timer 


TU4003 Timer 
11.2.60 


c 


TLV 


4 






44 


Location Status 


Location Status 
11.2.44 





TLV 


3 






62 


GAN Service Zone 
Information 


GAN Service Zone 

Information 

11.2.62 





TLV 


5-36 






67 


Serving GANC table 
indicator 


Serving GANC 
table indicator 
11.2.67 





TLV 


3 







10.1.6.1 TU4001 and TU4003 

These information elements are included in the message, if GPRS is supported by the GANC. 

1 0.1 .6.2 GAN Service Zone Information 

This information element is included by the HPLMN, if the network is configured with GAN Service Zone information. 

1 0.1 .6.3 Serving GANC Table Indicator 

The conditional IE Serving GANC Table Indicator shall be included when the GA-RC REGISTRATION ACCEPT is 
sent from the Default GANC. 

NOTE: the GANC knows from the presence of IE Registration Indicators in GA-RC REGISTER REQUEST, 
whether it is the Default GANC. 
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10.1.7 GA-RC REGISTER REDIRECT 

The GANC may use this message to redirect the MS to another GANG. In this case the message will contain the 
Serving GANG-SEGW and Serving GANG information. The message may also contain information about one or more 
PLMN identities where the MS may be served while in GAN coverage. 



Direction: 



GANG to MS 



Table 10.1.7.1: GA-RC REGISTER REDIRECT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-RC REGISTER 
REDIRECT Message 
Type 


Message Type 
11.1.1.4 


M 


V 


1 






9 


Serving GANC-SEGW 
IP address 


IP Address 
11.2.9 


C 


TLV 


7-19 






10 


Serving GANC-SEGW 
FQDN 


Fully Qualified 
Domain/Host Name 
11.2.10 


C 


TLV 


5-258 






97 


Serving GANC IP 
address 


IP Address 
11.2.9 


C 


TLV 


7-19 






98 


Serving GANC FQDN 


Fully Qualified 
Domain/Host Name 
11.2.10 


C 


TLV 


5-258 






103 


Serving GANC TCP 
port number 


Communication 

port 

11.2.25 


Q 


TLV 


4 






67 


Serving GANC table 
indicator 


Serving GANC 
table indicator 
11.2.67 


Q 


TLV 


3 






69 


GAN PLMN List 


GAN PLMN List 
11.2.69 


C 


TLV 


n 







1 0.1 .7.1 Serving GANC-SEGW IP address 

The conditional IE Serving GANG-SEGW IP address shall be included if neither the IE Serving GANG-SEGW FQDN 
nor the IE GAN PLMN List is included. 

1 0.1 .7.2 Serving GANC-SEGW FQDN 

The conditional IE Serving GANG-SEGW FQDN shall be included if neither the IE Serving GANG-SEGW IP address 
nor the IE GAN PLMN List is included. 

1 0.1 .7.3 Serving GANC IP address 

The conditional IE Serving GANG IP address shall be included if neither the IE Serving GANG FQDN nor the IE GAN 
PLMN List is included. 

1 0.1 .7.4 Serving GANC FQDN 

The conditional IE Serving GANC FQDN shall be included if neither the IE Serving GANG IP address nor the IE GAN 
PLMN List is included. 
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1 0.1 .7.5 Serving GANG TGP port number 

The optional IE Serving GANC TCP port number is included if the network is configured to use another than the 
default TCP port (as defined in sub-clause 12.1.2) for registrations. If this information element is included, then it is not 
permitted to include the GAN PLMN List information element. 

1 0.1 .7.5a Serving GANG Table Indicator 

The optional IE Serving GANC Table Indicator shall be included when the GA-RC REGISTRATION REDIRECT is 
sent from the Default GANC. 

NOTE: The GANC knows from the presence of IE Registration Indicators in GA-RC REGISTER REQUEST, 
whether it is the Default GANC. 



10.1.7.6 



GAN PLMN List 



The conditional IE GAN PLMN List contains information about 1 or more PLMNs that may provide GAN service to 
the MS in its current location. If this information element is included, then it is not permitted to include any of the 
following information elements: Serving GANC-SEGW IP address. Serving GANC-SEGW FQDN, Serving GANC IP 
address. Serving GANC FQDN and Serving GANC TCP port number. 

10.1.8 GA-RC REGISTER REJECT 

The GAN uses this message to reject the registration request from a MS. 
Direction: GANC to MS 

Table 10.1.8.1: GA-RC REGISTER REJECT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


Vi 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vz 


0000 






GA-RC REGISTER 
REJECT IVIessage 
Type 


IVIessage Type 
11.1.1.4 


M 


V 


1 






21 


Register Reject Cause 


Register Reject 

Cause 

11.2.21 


M 


TLV 


3 






16 


TU3907 Timer 


TU3907 Timer 
11.2.16 


C 


TLV 


4 






58 


Location Black List 
indicator 


Location Black List 

indicator 

11.2.58 


C 


TLV 


3 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


C 


TLV 


7 







10.1.8.1 TU3907 Timer 

The TU3907 Timer IE shall be included if the Register Reject Cause 'Network Congestion' is returned to the MS. 

1 0.1 .8.2 Location Blacl^ List indicator 

The Location Black List indicator IE shall be included if the Register Reject Cause 'Location not allowed' is returned to 
the MS. 
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10.1.8.3 



Location Area Identification 



The Location Area Identification IE shall be included if the Register Reject Cause 'Location not allowed' is returned to 
the MS. 

10.1.9 GA-RC DEREGISTER 

The GANG on receiving this message removes all contexts associated with the MS in the GANG. The MS on receiving 
this message releases all GA-RG, GA-GSR and GA-PSR resources. 

Direction: MS to GANG, GANG to MS 

Table 10.1.9.1: GA-RC DEREGISTER message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


Vz 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC DEREGISTER 
IVIessage Type 


Message Type 
11.1.1.4 


M 


V 


1 






21 


Register Reject Cause 


Register Reject 

Cause 

11.2.21 


M 


TLV 


3 






58 


Location Black List 
indicator 


Location Black List 

indicator 

11.2.58 


C 


TLV 


3 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


C 


TLV 


7 






16 


TU3907 Timer 


TU3907 Timer 
11.2.16 


C 


TLV 


4 







10.1.9.1 



Location Black List indicator 



The Location Black List indicator IE shall be included if the Register Reject Gause 'Location not allowed' is returned to 
the MS. 



10.1.9.2 



Location Area Identification 



The Location Area Identification IE shall be included if the Register Reject Gause 'Location not allowed' is returned to 
the MS. 

10.1.9.3 TU3907 Timer 

The TU3907 Timer IE shall be included if the Register Reject Gause "Network Gongestion" is returned to the MS. 

10.1.10 GA-RC REGISTER UPDATE UPLINK 

The MS shall send this message when it needs to update the GAN with the updated AP and GSM cell identities. 
Direction: MS to GAN 
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Table 10.1.10.1: GA-RC REGISTER UPDATE UPLINK message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC REGISTER 
UPDATE UPLINK 
message identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






3 


AP Radio Identity 


Radio Identity 
11.2.3 





TLV 


9 






6 


Coverage Indication 


GERAN/UTRAN 
coverage Indicator 
11.2.6 





TLV 


3 






4 


GERAN Cell Identity 


GERAN Cell 

Identity 

11.2.4 


C 


TLV 


4 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 


C 


TLV 


7 






41 


Routing Area Code 


Routing Area Code 
11.2.41 


C 


TLV 


3 






8 


Geographic Location 


Geographical 

Location 

11.2.8 





TLV 


9-n 






42 


AP Location 


AP Location 
11.2.42 





TLV 


7-n 






71 


Required GAN 
Services 


Required GAN 

Services 

11.2.71 





TLV 


3 






73 


3G Cell Identity 


3G Cell Identity 
11.2.73 


C 


TLV 


6 






61 


AP Service Name 


AP Service Name 
11.2.61 


C 


TLV 


4-67 







10.1.10.1 Cell Identity 

The GERAN Cell Identity shall be included, if GERAN/UTRAN Coverage Indication IE is included and the MS is in 
an area with GSM Coverage. The GERAN Cell Identity is retrieved from the GSM System information. If the GERAN 
Cell Identity information element is included, it is not permitted to include the 3G Cell Identity information element. 

10.1.10.2 Location Area Identification 

The most recent Location Area Identification shall be included, if available in the MS and if GERAN/UTRAN 
Coverage Indication IE is included. Following cases are identified: 

Normal service or limited service over GERAN or UTRAN 

In this case the LAI received in the GERAN/UTRAN System Information is included. 

- MS has not found GERAN/UTRAN coverage 

In this case the LAI is taken from the SIM, if available. 

10.1.10.3 Routing Area Code 

The Routing Area Code (RAC) shall be included, if available in the MS and if "Coverage Indication" is included. 
Following cases are identified: 

- Normal service over GERAN/UTRAN with GPRS support 

In this case the RAC received in the GERAN/UTRAN System Information is included. 
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- MS has not found GERAN/UTRAN coverage 

In this case the RAC is taken from the SIM, if available. 

Normal service over GERAN/UTRAN without GPRS support or limited service 
The RAC is not included. 

10.1.10.4 3G Cell Identity 

The 3G Cell Identity shall be included, if GERAN/UTRAN Coverage Indication IE is included and the MS is in an 
area with UTRAN Coverage. The 3G Cell Identity is retrieved from the UTRAN System information. If the 3G Cell 
Identity information element is included, it is not permitted to include the GERAN Cell Identity information element. 

1 0.1 .1 0.5 AP Service Name 

The AP Service Name information element shall be included, if available, and if the AP Radio Identity information 
element is included. 

10.1.11 GA-RC REGISTER UPDATE DOWNLINK 

The network sends this message to the MS to indicate change in GAN system information or MS location status. 
Direction: GANG to MS 
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Table 10.1.11.1: GA-RC REGISTER UPDATE DOWNLINK message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC REGISTER 
UPDATE DOWNLINK 
message identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






4 


Cell Identity 


Cell Identity 
11.2.4 





TLV 


4 






5 


Location Area 
Identification 


Location Area 

Identification 

11.2.5 





TLV 


7 






14 


GANC Control 
Channel Description 


GAN Control 
Channel 
Description 
11.2.14 





TLV 


8 






23 


TU3910 Timer 


TU3910 Timer 
11.2.23 





TLV 


4 






22 


TU3906 Timer 


TU3906 Timer 
11.2.22 





TLV 


4 






19 


GAN Band 


GAN Band 
11.2.19 





TLV 


3 






37 


TU3920 Timer 


TU3920 Timer 
11.2.37 





TLV 


4 






13 


GANC Cell Description 


GAN Cell 

Description 

11.2.13 





TLV 


4 






43 


TU4001 Timer 


TU4001 Timer 
11.2.43 





TLV 


4 






60 


TU4003 Timer 


TU4003 Timer 
11.2.60 





TLV 


4 






44 


Location Status 


Location Status 
11.2.44 





TLV 


3 






62 


GAN Service Zone 
Information 


GAN Service Zone 

Information 

11.2.62 





TLV 


5-36 







1 0.1 .1 1 .1 GAN Service Zone Information 

This information element is included from the HPLMN, if the network is configured with UMA Service Zone 
information. 

10.1.12 GA-CSR REQUEST 

The MS sends this message to the network to establish the GA-CSR Connection. 
Direction: MS to GANC 
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Table 10.1.12.1 : GA-CSR REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR REQUEST 
message identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






50 


Establishment Cause 


Establishment 

Cause 

11.2.50 


M 


TLV 


3 







10.1.13 GA-CSR REQUEST ACCEPT 

The GANG sends this message to the MS to indicate that is has accepted the estabhshment of the GA-GSR Gonnection. 
Direction: GANG to MS 

Table 10.1.13.1: GA-CSR REQUEST ACCEPT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR REQUEST 
ACCEPT message 
identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 







10.1.14 GA-RC KEEP ALIVE 

The MS sends this message to the GANG. 
Direction: MS to GANG 

Table 10.1.14.1: GA-RC KEEP ALIVE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC KEEP ALIVE 
Message Type 


IVIessage Type 
11.1.1.4 


M 


V 


1 







10.1. 14a GA-RC CELL BROADCAST INFO 

The GANG sends this message to the MS. 
Direction: GANG to MS 
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Table 10.1.14.1 : GA-RC CELL BROADCAST INFO message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-RC CELL 
BROADCAST INFO 
IVIessage Type 


Message Type 
11.1.1.4 


M 


V 


1 






72 


Broadcast Container 


Broadcast 

container 

11.2.72 


M 


TLV 


n-m 







10.1.15 GA-CSR ACTIVATE CHANNEL 

The GANC uses this message to estabhsh a traffic channel on GAN. 
Direction: GANC to MS 

Table 10.1.15.1: GA-CSR ACTIVATE CHANNEL message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR ACTIVATE 
CHANNEL message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






27 


Channel Mode 


Channel Mode 
11.2.27 


M 


TLV 


3 






53 


Sample Size 


Sample Size 
11.2.53 


M 


TLV 


3 




CS 

payload 

sample 

size in ms 


97 


IP Address 


IP Address 
11.2.9 


M 


TLV 


7-19 






104 


RTP UDP Port 


Communication 

Port 

11.2.25 


M 


TLV 


4 






54 


Payload Type 


Payload Type 
11.2.54 





TLV 


3 






55 


Multi-rate 
Configuration 


Multi-rate 

Configuration 

11.2.55 


C 


TLV 


3-n 






63 


RTP Redundancy 
Configuration 


RTP Redundancy 

Configuration 

11.2.63 


c 


TLV 


3-6 






105 


RTCP UDP Port 


Communication 

Port 

11.2.25 





TLV 


4 







10.1.15.1 Payload Type 

The Payload Type information Element is included when the speech codec signaled uses dynamic Payload Type. 
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1 0.1 .1 5.2 Multi-rate Configuration 

The Multi-rate Configuration information element is included when the Channel Mode is speech with a speech version 
using AMR. 

1 0.1 .1 5.3 RTP Redundancy Configuration 

The RTP Redundancy Configuration information element is included when the Channel Mode is speech with a speech 
version using AMR, and the MS has indicated support for RTP Redundancy through the GAN Classmark IE. The 
redundancy level is defined for each of the AMR modes in the Multi-rate Configuration. The level of redundancy can 
span from no redundancy to double redundancy. 

10.1.15.4 RTCPUDPPort 

The RTCP UDP port information element is used to indicate the UDP port for RTCP, if RTCP shall be used towards the 
network. 

10.1.16 GA-CSR ACTIVATE CHANNEL ACK 

The MS indicates the communication port information for the downlink stream to the Serving GANC. 
Direction: MS to GANC 

Table 10.1.16.1: GA-CSR ACTIVATE CHANNEL ACK message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Lengtii Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR ACTIVATE 
CHANNEL ACK 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






104 


RTP UDP Port 


Communication 

Port 

11.2.25 


M 


TLV 


4 






53 


Sample Size 


Sample Size 
11.2.53 


M 


TLV 


3 




CS 

payload 

sample 

size in ms 


54 


Payload Type 


Payload Type 
11.2.54 





TLV 


3 






105 


RTCP UDP Port 


Communication 

Port 

11.2.25 





TLV 


4 







10.1.16.1 Payload Type 

The Payload Type information Element is included when the speech codec signaled uses dynamic Payload Type. 

10.1.16.2 RTCPUDPPort 

The RTCP UDP port information element is used to indicate the UDP port for RTCP, if RTCP shall be used towards the 
mobile station. 
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10.1.16.3 Sample Size 

The MS shall indicate what sample size it is using and what the network shall use in the downlink. The MS shall follow 
the minimum sample size indication sent by the network in GA-CSR ACTIVATE CHANNEL. 

1 0.1 .1 7 GA-CSR ACTIVATE CHANNEL FAILURE 

The MS indicates failure to establish the channel to the GANC. 
Direction: MS to GANC 

Table 10.1.17.1: GA-CSR ACTIVATE CHANNEL FAILURE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length ndicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vl 


0000 






GA-CSR ACTIVATE 
CHANNEL FAILURE 
message identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






29 


RR cause 


RR cause 
11.2.29 


M 


TLV 


3 







1 0.1 .1 8 GA-CSR ACTIVATE CHANNEL COMPLETE 

The Serving GANC acknowledges completion of the traffic channel establishment. 
Direction: GANC to MS 

Table 10.1.18.1: GA-CSR ACTIVATE CHANNEL COMPLETE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vz 


0000 






GA-CSR ACTIVATE 
CHANNEL 

COMPLETE message 
identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 







10.1.19 GA-CSR RELEASE 

This message is used to instruct the MS to release all GA-CSR related resources associated with the connection to the 
Serving GANC. 



Direction: 



GANC to MS 
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Table 10.1.19.1: GA-CSR RELEASE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vl 


0000 






GA-CSR RELEASE 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






29 


RR cause 


RR cause 
11.2.29 


M 


TLV 


3 






31 


GPRS Resumption 


GPRS Resumption 
11.2.31 





TLV 


3 







1 0.1 .20 GA-CSR RELEASE COMPLETE 

The MS acknowledges release of all GA-CSR related resources to the Serving GANC. 
Direction: MS to GANC 

Table 10.1.20.1 : GA-CSR RELEASE COMPLETE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR RELEASE 
COMPLETE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 







10.1.21 GA-CSR PAGING REQUEST 

Direction: GANC to MS 

Table 10.1.21.1: GA-CSR PAGING REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR PAGING 
REQUEST message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






51 


Channel Needed 


Channel Needed 
11.2.51 


M 


TLV 


3 






1 


TMSI or IMSI 


Mobile Identity 
11.2.1 


M 


TLV 


7-10 
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10.1.22 GA-CSR PAGING RESPONSE 

The MS responds to the page using this message. 

Direction: MS to GANG 

Table 10.1.22.1 : GA-CSR PAGING RESPONSE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


Vi 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR PAGING 
RESPONSE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






48 


Ciphering Key 
Sequence Number 


Ciphering Key 
Sequence Number 
11.2.48 


M 


TLV 


3 






28 


IVIobile Station 
Classmarl< 2 


IVIobile Station 
Classmark2 11.2.28 


M 


TLV 


5 






1 


IVIobile Identity 


Mobile Identity 
11.2.1 


M 


TLV 


7-10 






50 


Establishment Cause 


Establishment 

Cause 

11.2.50 


M 


TLV 


3 







10.1.23 GA-CSR UPLINK DIRECT TRANSFER 

The MS communicates with the CN by encapsulating CC/MM/SS/SMS messages in this container. 
Direction: MS to GANG 

Table 10.1.23.1: GA-CSR UPLINK DIRECT TRANSFER message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR UPLINK 
DIRECT TRANSFER 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






26 


L3 message 


L3 Message 
11.2.26 


M 


TLV 


Var. 
Length 






49 


SAPI ID 


SAPI ID 
11.2.49 


M 


TLV 


3 







1 0.1 .24 GA-CSR REQUEST REJECT 

The GANG sends this message to the MS to indicate that is has rejected the estabhshment of the GA-CSR Connection. 
Direction: GANG to MS 
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Table 10.1.24.1 : GA-CSR REQUEST REJECT message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR REQUEST 
REJECT message 
identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






29 


RR cause 


RR cause 
11.2.29 


M 


TLV 


3 







1 0.1 .25 GA-CSR DOWNLINK DIRECT TRANSFER 

The CN communicates with the MS by encapsulating CC/MM/SS/SMS messages in this container. 
Direction: GANG to MS 

Table 10.1.25.1: GA-CSR DOWNLINK DIRECT TRANSFER message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR DQWNLINK 
DIRECT TRANSFER 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






26 


L3 message 


L3 IVIessage 
11.2.26 


M 


TLV 


Var. 
Length 







1 0.1 .26 GA-CSR CLASSMARK ENQUIRY 

The GN obtains classmark information of the mobile through this enquiry message. 
Direction: GANG to MS 

Table 10.1.26.1: GA-CSR CLASSMARK ENQUIRY message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR 
CLASSMARK 
ENQUIRY message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






65 


Classmark Enquiry 
Mask 


Classmark Enquiry 

Mask 

11.2.65 


Q 


TLV 


3 
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1 0.1 .27 GA-CSR CLASSMARK CHANGE 



The MS sends classmark information indicating it's capabilities to the network using this message. 
Direction: MS to GANG 

Table 10.1.27.1 : GA-CSR CLASSMARK CHANGE message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Lengthi Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR 
CLASSMARK 
CHANGE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






28 


IVIobile Station 
Classmark 2 


Mobile Station 
Classmark 2 
11.2.28 


M 


TLV 


5 






56 


Additional Mobile 
Station Classmark 
Information 


Mobile Station 
Classmark 3 
11.2.56 


C 


TLV 


3-14 







10.1.27.1 Additional IVIobile Station Classmark Information 

This IE shall be included if and only if the GM3 bit in the Mobile Station Classmark 2 IE is set to 1 . 

10.1.28 GA-CSR STATUS 

The MS communicates to the GANG various error conditions. 
Direction: MS to GANG 

Table 10.1.28.1 : GA-CSR STATUS message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR STATUS 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






29 


RR Cause 


RR Cause 
11.2.29 


M 


TLV 


3 






52 


PDU in Error 


PDU in Error 
11.2.52 


M 


TLV 


4- 

(max 

PDU 

size-7) 







10.1.29 GA-CSR HANDOVER ACCESS 

Direction: MS to GANG 
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Table 10.1.29.1 : GA-CSR HANDOVER ACCESS message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR HANDOVER 
ACCESS message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






26 


Handover To GAN 
Command 


L3 Message 
11.2.26 


M 


TLV 


Var. 
Length 







1 0.1 .29.1 Handover To GAN Command 

This information element contains the entire (RR) HANDOVER COMMAND message received via the source radio 
access technology. 

1 0.1 .30 GA-CSR HANDOVER COMPLETE 

Direction: MS to GANG 

Table 10.1.30.1: GA-CSR HANDOVER COMPLETE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR HANDOVER 
COMPLETE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 







1 0.1 .31 GA-CSR UPLINK QUALITY INDICATION 

The GANG indicates changes in the uplink quality, which may be used by the MS to trigger the handover from GAN 
procedure. 

Direction: GANG to MS 

Table 10.1.31.1 : GA-CSR UPLINK QUALITY INDICATION message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR UL QUALITY 
INDICATION 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






33 


UL Quality Indication 


UL Quality Indication 
11.2.33 


M 


V 


3 
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10.1.32 GA-CSR HANDOVER INFORMATION 

The MS triggers the handover from GAN procedure indicating the Ust of cell identifiers in the target radio access 
technology. 

Direction: MS to GANG 

Table 10.1.32.1: GA-CSR HANDOVER INFORMATION message content 



lEI 


Information 
Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR 
HANDOVER 
INFORMATION 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






15 


GERAN Cell 
Identifier List 


Cell Identifier List 
11.2.15 


C 


TLV 


n 






106 


GERAN Received 
Signal Level List 


Received Signal 
Level List 
11.2.70 


C 


TLV 


n 






66 


UTRAN Cell 
Identifier List 


UTRAN Cell 
Identifier List 
11.2.66 


c 


TLV 


n 






107 


UTRAN Received 
Signal Level List 


Received Signal 
Level List 
11.2.70 


c 


TLV 


n 







1 0.1 .32.1 GERAN Cell Identifier List 

The GERAN Cell Identifier List information element shall be included if Handover to a GERAN cell is initiated. The 
cells are ranked in order of preference (the most preferred cell is the first one in the list). 

1 0.1 .32.2 GERAN Received Signal Level List 

The GERAN Received Signal Level List information element shall be included if the GERAN Cell Identifier List 
information element is included. It contains the Received signal quality for each cell included in the GERAN Cell 
Identifier List information element. The order of the measurements in the GERAN Received Signal Level List shall be 
the same as the order of the Cell identifiers included in the GERAN Cell Identifier List information element. 

1 0.1 .32.3 UTRAN Cell Identifier List 

The UTRAN Cell Identifier List information element shall be included if Handover to an UTRAN cell is initiated. The 
cells are ranked in order of preference (the most preferred cell is the first one in the list). 

1 0.1 .32.4 UTRAN Received Signal Level List 

The UTRAN Received Signal Level List information element shall be included if the UTRAN Cell Identifier List 
information element is included. It contains the Received signal quality for each cell included in the UTRAN Cell 
Identifier List information element. The order of the measurements in the UTRAN Received Signal Level List shall be 
the same as the order of the Cell identifiers included in the UTRAN Cell Identifier List information element. 

NOTE: At least one of the cell identifier list lEs must be present. 
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10.1.33 GA-CSR HANDOVER COMMAND 

The GANG orders the MS to handover from GAN. 
Direction: GANG to MS 

Table 10.1.33.1: GA-CSR HANDOVER COMMAND message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR HANDOVER 
COMMAND message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






32 


Handover From GAN 
Command 


Handover From GAN 

Command 

11.2.32 


M 


TLV 


n 







1 0.1 .33.1 Handover From GAN Command 

If the target radio access technology is GERAN, the value part of the Handover From GAN Command IE is coded as 
the HANDOVER COMMAND message specified in [44.018]. If the target RAT is UTRAN, the rest of the IE is coded 
as HANDOVER TO UTRAN COMMAND message in [25.331] 

10.1.34 GA-CSR HANDOVER FAILURE 

The MS indicates a failure to complete the requested handover from GAN. 
Direction: MS to GANG 

Table 10.1.34.1: GA-CSR HANDOVER FAILURE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR HANDOVER 
FAILURE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






29 


RR Cause 


RR Cause 
11.2.29 


M 


TLV 


3 







10.1.34.1 RR Cause 

If the target radio access technology is GERAN/UTRAN, this information element is coded as the RR Cause IE in 
[44.018]. 

1 0.1 .35 GA-CSR CIPHERING MODE COMMAND 

The network sends this message to the MS to indicate the ciphering configuration for future handover to GERAN. 
Direction: GANG to MS 
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Table 10.1.35.1: GA-CSR CIPHERING MODE COMMAND message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR CIPHERING 
MODE COMMAND 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






30 


Ciphering Mode 
Setting 


Cipher Mode Setting 
11.2.30 


M 


TLV 


3 






45 


Cipher Response 


Cipher Response 
11.2.45 


M 


TLV 


3 






46 


Random number 


Ciphering Command 

RAND 

11.2.46 


M 


TLV 


18 







1 0.1 .36 GA-CSR CIPHERING MODE COMPLETE 

The MS sends this message to the GANC to acknowledge the ciphering configuration as well as to authenticate that the 
MS holds the correct Kc. 

Direction: MS to GANC 

Table 10.1.36.1: GA-CSR CIPHERING MODE COMPLETE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR CIPHERING 
MODE COMPLETE 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






47 


Message 
Authentication Code 


Ciphering Command 

MAC 

11.2.47 


M 


TLV 


14 






1 


Mobile Equipment 
Identity 


Mobile Identity 
11.2.1 


C 


TLV 


11 







1 0.1 .36.1 Mobile Equipment Identity 

This information element is included according the value of the Mobile Equipment Identity Request of the GA-CSR 
CIPHERING MODE COMMAND. 

1 0.1 .37 GA-CSR CLEAR REQUEST 

The MS sends this message to the network to indicate that the network should release the signalling connection and 
related resources. 



Direction: 



MS to GANC 
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Table 10.1.37.1 : GA-CSR CLEAR REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


IVI 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR CLEAR 
REQUEST message 
identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






29 


RR cause 


RR cause 
11.2.29 


M 


TLV 


3 







1 0.1 .38 GA-CSR GPRS SUSPENSION REQUEST 

This message is used by the MS to request the suspension of the GPRS downhnk data transfer when transitioning to 
dedicated mode. 

Direction: MS to GANG. 

Table 10.1.38.1: GA-CSR GPRS SUSPENSION REQUEST message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR GPRS 
SUSPENSION 
REQUEST message 
identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






34 


TLLI 


TLLI 
11.2.34 


IVI 


TLV 


6 






36 


Suspension cause 


Suspension Cause 
11.2.36 


M 


TLV 


3 






18 


Routing Area 
Identification 


Routing Area 
Identification 
11.2.18 


IVI 


TLV 


8 







10.1.39 GA-RC SYNCHRONIZATION INFORMATION 

This message is sent by the MS after successful re-estabhshment of the TCP connection as defined in sub-clause 9.5. 
Direction: MS to GANG. 
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Table 10.1.39.1: GA-RC SYNCHRONIZATION INFORMATION message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0000 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-RC 

SYNCHRONIZATION 
INFORMATION 
message identity 


IVIessage Type 
11.1.1.4 


M 


V 


1 






1 


IMSI 


IVIobile Identity 
11.2.1 


M 


TLV 


10 






20 


GA-RC State 


GA-RC State 
11.2.20 


M 


TLV 


3 







10.1.40 GA-CSR CHANNEL MODE MODIFY 

This message is sent by the network to the mobile station to request the setting of the mode for the indicated channel(s). 
Table 10.1.40.1: GA-CSR CHANNEL MODE MODIFY message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR CHANNEL 
MODE MODIFY 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






27 


Channel Mode 


Channel Mode 
11.2.27 





TLV 


3 






55 


Multi-rate 
Configuration 


Multi-rate 

Configuration 

11.2.55 


C 


TLV 


3-n 






63 


RTP Redundancy 
Configuration 


RTP Redundancy 

Configuration 

11.2.63 


c 


TLV 


3-6 






53 


Sample Size 


Sample Size 
11.2.53 





TLV 


3 




CS 

payload 

sample 

size in ms 


97 


IP Address 


IP Address 
11.2.9 





TLV 


7-19 






104 


RTP UDP Port 


Communication 

Port 

11.2.25 





TLV 


4 






105 


RTCP UDP Port 


Communication 

Port 

11.2.25 





TLV 


4 







10.1.40.1 Channel Mode 

The Channel Mode IE shall be included if the GANC is changing the current Channel Mode. 
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1 0.1 .40.2 Multi-rate Configuration 

The Multi-rate Configuration information element is included when the Channel Mode is speech with a speech version 
using AMR. 

1 0.1 .40.3 RTP Redundancy Configuration 

The Redundancy Configuration information element is included when the Channel Mode is speech with a speech 
version using AMR, and the MS has indicated support for RTP Redundancy through the GAN Classmark IE. The 
redundancy level is defined for each of the AMR modes in the Multi-rate Configuration. The level of redundancy can 
span from no redundancy to double redundancy. 

10.1.40.4 Sample Size 

The Sample Size IE shall be included if the GANC is changing the current Sample Size. The MS should use the value 
indicated by the IE "Sample Size" as the minimum sampling size for the coding and decoding of the CS payload 
samples, if the MS is not able to use the indicated value. 

10.1.40.5 IP Address 

The IP Address IE shall be included if the GANC is changing the local IP address used for an active user plane session. 

10.1.40.6 RTP UDP Port 

The RTP UDP Port IE shall be included if the GANC is changing the local UDP Port used for RTP for an active user 
plane session. 

10.1.40.7 RTCP UDP Port 

The RTCP UDP Port IE shall be included if the GANC is changing the local UDP Port used for RTCP for an active user 
plane session. 

1 0.1 .41 GA-CSR CHANNEL MODE MODIFY ACKNOWLEDGE 

This message is sent by the mobile station to the network to indicate the successful or unsuccessful execution of a 
channel mode modify request 

Table 10.1.41.1: GA-CSR CHANNEL MODE MODIFY ACKNOWLEDGE message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


'h 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-CSR CHANNEL 
MODE MODIFY 
ACKNOWLEDGE 
message identity 


Message Type 
11.1.1.4 


M 


V 


1 






27 


Channel Mode 


Channel Mode 
11.2.27 


M 


TLV 


3 






53 


Sample Size 


Sample Size 
11.2.53 





TLV 


3 




CS 

payload 

sample 

size in ms 
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10.1.41.1 Channel Mode 

The Channel Mode IE shall always be included by the MS. It contains the currently used Channel Mode. 

10.1.41.2 Sample Size 

The Sample Size IE shall be included by the MS if it was included in the GA-CSR CHANNEL MODE MODIFY. It 
contains the currently used Sample Size. 

1 0.1 .42 GA-CSR UTRAN CLASSMARK CHANGE 



The MS sends UTRAN Classmark information indicating its UTRAN capabilities to the network using this message. 
Direction: MS to GANC 

Table 10.1.42.1 : GA-CSR UTRAN CLASSMARK CHANGE message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-CSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-CSR UTRAN 
CLASSMARK 
CHANGE message 
identity 


Message Type 
11.1.1.4 


M 


V 


1 






64 


UTRAN Classmark 


UTRAN Classmark 
11.2.64 


M 


TLV 


n 







1 0.2 Messages for Generic Access Radio Link Control (GA-PSR) 
IVIanagement 

Table 10.2.1 summarizes the messages for Generic Access Radio Link Control (GA-PSR) management. 
Table 10.2.1 : Messages for Generic Access Radio Link Control management 



GA-PSR TC Management messages: 


Reference 


Transport Layer 
used 


GA-PSR-ACTIVATE-UTC-REQ 


10.2.1 


TCP 


GA-PSR-ACTIVATE-UTC-ACK 


10.2.2 


TCP 


GA-PSR-DEACTIVATE-UTC-REQ 


10.2.3 


TCP 


GA-PSR-DEACTIVATE-UTC-ACK 


10.2.4 


TCP 


GPRS Tunnelling messages: 


Reference 




GA-PSR-DATA 


10.2.5 


TCP 


GA-PSR-UNITDATA 


10.2.6 


UDP 


GAN Specific Signalling messages: 


Reference 




GA-PSR-PS-PAGE 


10.2.7 


TCP 


GA-PSR-DFC-REQ 


10.2.9 


UDP 


GA-PSR-UFC-REQ 


10.2.8 


UDP 


GA-PSR-STATUS 


10.2.10 


TCP 



1 0.2.1 GA-PSR-ACTIVATE-UTC-REQ 

This message is sent either by the MS or GANC to initiate GA-PSR Transport Channel activation. 
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Direction: GANG to MS, MS to GANG. 

Table 10.2.1.1: GA-PSR-ACTIVATE-UTC-REQ message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


Vi 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-PSR-ACTIVATE- 
UTC-REQ message 
identity 


IVIessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 






100 


UDP Port for GPRS 
user data transport 


Communication 

Port 

11.2.25 


M 


TLV 


4 






99 


IP address for GPRS 
user data transport 


IP Address 
11.2.9 





TLV 


7-19 







1 0.2.1 .1 IP address for GPRS user data transport 

This IE shall be included by the GANG and shall not be included by the MS. It contains GANG IP address for GPRS 
user data transport if GANG initiates activation. 

10.2.1.2 UDP Port for GPRS user data transport 

This information element contains MS UDP port for GPRS user data transport if MS initiates activation. It contains 
GANG UDP port for GPRS user data transport if GANG initiates activation. 

1 0.2.2 GA-PSR-ACTI VATE-UTC-ACK 

This message is sent either by the MS or GANG to confirm GA-PSR Transport Ghannel activation. 
Direction: GANG to MS, MS to GANG. 

Table 10.2.2.1: GA-PSR-ACTIVATE-UTC-ACK message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


V2 


0010 






Skip 
Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-PSR-ACTIVATE- 
UTC-ACK message 
identity 


IVIessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 






99 


IP address for GPRS 
user data transport 


IP Address 
11.2.9 





TLV 


7-19 






100 


UDP Port for GPRS 
user data transport 


Communication 
Port Identity 
11.2.25 


C 


TLV 


4 






39 


GA-PSR TC 
Activation Status 


GA-PSR Cause 
11.2.39 


M 


TLV 


3 
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1 0.2.2.1 IP address for GPRS user data transport 

This IE shall be included by the GANG and shall not be included by the MS. It contains GANG IP address for GPRS 
user data transport if MS initiates successful activation. 

1 0.2.2.2 UDP Port for GPRS user data transport 

This information element must be included if the GA-PSR cause indicates success (0) and contains the following: 
GANG UDP port for GPRS user data transport if MS initiates activation. 
MS UDP port for GPRS user data transport if GANG initiates activation. 

1 0.2.3 GA-PSR-DEACTIVATE-UTC-REQ 

This message is sent by the MS or by the GANG to initiate GA-PSR Transport Ghannel deactivation. 
Direction: MS to GANG, GANG to MS. 

Table 10.2.3.1: GA-PSR-DEACTIVATE-UTC-REQ message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


y2 


0000 






GA-PSR- 
DEACTIVATE-UTC- 
REQ message 
identity 


IVlessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 






39 


GA-PSR TC 
Deactivation Cause 


GA-PSR Cause 
11.2.39 


M 


TLV 


3 







1 0.2.4 GA-PSR-DEACTIVATE-UTC-ACK 

This message is sent by the GANG or by the MS to confirm GA-PSR Transport Channel deactivation. 
Direction: GANG to MS, MS to GANG. 

Table 10.2.4.1: GA-PSR-DEACTIVATE-UTC-ACK message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


y2 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


Vi 


0000 






GA-PSR- 
DEACTIVATE-UTC- 
ACK message 
identity 


IVlessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 
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10.2.5 GA-PSR-DATA 

This message is used both in uplink and downlink direction to tunnel GPRS signalling and SMS messages. 
Direction: GANG to MS and MS to GANG. 

Table 10.1.5.1 : GA-PSR-DATA message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


Vi 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


V2 


0000 






GA-PSR-DATA 
message identity 


IVIessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 






38 


Requested QoS 


QoS 
11.2.38 


C 


TLV 


3 






35 


Packet Flow Identifier 


Packet Flow 

Identifier 

11.2.35 





TLV 


3 






57 


LLC PDU 


LLC-PDU 
11.2.57 


M 


TLV 


2-1562 







10.2.5.1 Requested QoS 

This Information Element is Mandatory for uplink packets only i.e. in the direction from MS to GANG. This IE shall 
not be included in downlink packets i.e. in the direction from GANG to MS. 

10.2.5.2 Packet Flow Identifier 

This Information Element is present only if packet flow management procedures are supported. 

1 0.2.6 GA-PSR-UNITDATA 

This message is used to tunnel uplink and downlink GPRS user data messages (on the GA-PSR TG over UDP) between 
the MS and GANG. 

Direction: GANG to MS and MS to GANG. 

Table 10.2.6.1 : GA-PSR-UNITDATA message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




GA-PSR-UNITDATA 
message identity 


IVIessage Type 
11.1.3.1 


M 


V 


1 








TLLI 


TLLI 
11.1.3.2 


M 


V 


4 








Sequence Number 


Sequence Number 
11.1.3.3 


M 


V 


2 






38 


Requested QoS 


QoS 
11.2.38 


C 


TLV 


3 






35 


Packet Flow Identifier 


Packet Flow 

Identifier 

11.2.35 





TLV 


3 






57 


LLC PDU 


LLC-PDU 
11.2.57 


M 


TLV 


2-1562 
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10.2.6.1 Requested QoS 

This Information Element is Mandatory for uplink packets only i.e. in the direction from MS to GANC. This IE shall 
not be included in downlink packets i.e. in the direction from GANC to MS. 

10.2.6.2 Packet Flow Identifier 

This Information Element is present only if packet flow management procedures are supported. 

10.2.7 GA-PSR-PS-PAGE 

This message is used by the GANC to forward the packet page for PS services to the MS. 
Direction: GANC to MS. 

Table 10.2.7.1 : GA-PSR-PS-PAGE message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0010 






Skip 
Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-PSR-PS-PAGE 
message identity 


IVIessage Type 
11.1.2.1 


M 


V 


1 








Reserved 


TLLI 
11.1.2.2 


M 


V 


4 





To keep 
GA-PSR- 
signalling 
message 
header 
consistent 


1 


IVIobile Identity 


Mobile Identity 
11.2.1 


M 


TLV 


7-10 







10.2.7.1 Mobile Identity 

The mobile identity IE contains either IMSI or P-TMSI based on the request from SGSN. 

10.2.8 GA-PSR-UFC-REQ 

This message is sent by the GANC to the MS (on the GA-PSR TC over UDP) to initiate uplink flow control procedure. 
Direction: GANC to MS. 
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Table 10.2.8.1 : GA-PSR-UFC-REQ message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




GA-PSR-UFC-REQ 
message identity 


IVIessage Type 
11.1.3.1 


M 


V 


1 








TLLI 


TLLI 
11.1.3.2 


M 


V 


4 








Sequence Number 


Sequence Number 
11.1.3.3 


M 


V 


2 






40 


Requested Uplinl< 
User Data Rate 


User Data Rate 
11.2.40 


M 


TLV 


5 






35 


Packet Flow Identifier 


Packet Flow 

Identifier 

11.2.35 





TLV 


3 






59 


Reset Indicator 


Reset Indicator 
11.2.59 





TLV 


3 







10.2.8.1 



Packet Flow Identifier 



This Information Element is included if the request is related to a specific PFC (e.g. not included when PFM procedures 
are not supported). 

10.2.8.2 Reset Indicator 

This information element is included if the GANC initiates an uplink flow control condition reset. 

10.2.9 GA-PSR-DFC-REQ 

This message is sent by the MS to the GANC (on the GA-PSR TC over UDP) to initiate downlink flow control 
procedure. 

Direction: MS to GANC. 

Table 10.2.9.1 : GA-PSR-DFC-REQ message content 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




GA-PSR-DFC-REQ 
message identity 


IVIessage Type 
11.1.3.1 


M 


V 


1 








TLLI 


TLLI 
11.1.3.2 


M 


V 


4 








Sequence Number 


Sequence Number 
11.1.3.3 


M 


V 


2 






40 


Requested Downlink 
User Data Rate 


User Data Rate 
11.2.40 


M 


TLV 


5 






35 


Packet Flow Identifier 


Packet Flow 

Identifier 

11.2.35 





TLV 


3 







10.2.9.1 



Packet Flow Identifier 



This Information Element is included if the request is related to a specific PFC (e.g. not included when PFM procedures 
are not supported). 

10.2.10 GA-PSR-STATUS 

This message is used to indicate protocol errors. 
Direction: MS to GANC. 



£75/ 



3GPP TS 44.318 version 6.1.0 Release 6 



101 



ETSI TS 144 318 V6.1.0 (2005-07) 



Table 10.2.10.1 : GA-PSR-STATUS message content 



IE! 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-PSR-STATUS 
message identity 


IVIessage Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 






39 


GA-PSR Cause 


GA-PSR Cause 
11.2.39 


M 


TLV 


3 






52 


PDU in Error 


PDU in Error 
11.2.52 


M 


TLV 


4- 

(max 

PDU 

size-7) 







1 1 General message format and information elements 
coding 

11.1 Message coding principles 

Three different message headers are defined in this specification: 

GA-CSR message header (defined in sub-clause 11.1.1) 

GA-PSR message header over TCP (defined in sub-clause 1 1 . 1 .2) 

GA-PSR message header over UDP (defined in sub-clause 11.1.3) 

The principles for Information Element coding are described in sub-clause 11.1.4. 

11.1.1 GA-RC and GA-CSR Message header information elements 

Each GA-RC and GA-CSR message begins with a 4-octet GA-RC and GA-PSR message header. This message header 
consists of Information Elements Length Indicator, Protocol Discriminator, Skip Indicator and Message Type, which 
are described in the following sub-clauses. 

Table 11.1.1.1: GA-RC and GA-CSR message header contents 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-RC and GA-CSR 
Protocol Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0001 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-RC and GA-CSR 
Message Type 


Message Type 
11.1.1.4 


M 


V 


1 








Here continues the list of lE's using TLV coding format and depending on Protocol Discriminator and 
Message Type as defined in clause 10. 
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11.1.1.1 



Length Indicator (LI) 



The first two octets of the Message header contain Length Indicator. The LI is needed as each message is transported 
using TCP, which provides a 'stream-of-bytes' transmission i.e. no message concept, or message length concept is 
provided by TCP and this has to be handled on the application layer. 

This field specifies the total length of the message excluding the 2 octets for Length Indicator. 

Minimum value for LI is 2 and maximum value is defined as 2048. 

For example: For a message of total length of 20 octets, this field is coded with the decimal value of 18. Then there 
follows 18 octets of message (i.e. total length of TCP-data is 20 octets). 



octet 1 
octet 2 



Figure 1 1 .1 .1 .1 .1 . Length Indicator message header field 
Table 11.1.1.1.1: Length Indicator message header field 



8 


7 


6 


5 4 


3 


2 


1 


LI MSB 


LI LSB 



LI value, Length Indicator value (octet 1 and 2) 

In the LI value field bit 8 of octet 1 is the most significant bit and bit 1of octet 2 the least 
significant bit. 

The Length Indicator consists of 2 octets. 



11.1.1.2 



Protocol Discriminator (PD) 



Bits 1 to 4 of the third octet in the message header contain the Protocol Discriminator (PD) information element. The 
PD identifies the upper layer protocol to which the message belongs. 

The following Protocol Discriminators are defined: 

Table 11.1.1.2.1: GA-RC, GA-CSR AND GA-PSR and GA-PSR Protocol Discriminators 



Protocol 


PD 


RC 





CSR 


1 


PSR 


2 



11.1.1.3 



Skip indicator 



Bits 5 to 8 of the third octet in the message header contain the skip indicator information element. A message received 
with skip indicator different from 0000 shall be ignored. A message received with skip indicator encoded as 0000 shall 
not be ignored (unless it is ignored for other reasons). A protocol entity sending any message shall encode the skip 
indicator as 0000. 



11.1.1.4 



Message Type Octet 



The message type octet is the fourth octet in the GA message header. The bit 8 of Message Type field is the most 
significant bit and bit 1 is the least significant bit. 

Following message types are defined for GA: 
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Table 11.1.4.1 : Message types for Unlicensed Radio Resources management 



Message name 


Message Type 
value (decimal) 


Message Type 
value (hex) 


GA-RC DISCOVERY REQUEST 


1 


H'01 


GA-RC DISCOVERY ACCEPT 


2 


H'02 


GA-RC DISCOVERY REJECT 


3 


H'03 


GA-RC REGISTER REQUEST 


16 


H'10 


GA-RC REGISTER ACCEPT 


17 


H'11 


GA-RC REGISTER REDIRECT 


18 


H'12 


GA-RC REGISTER REJECT 


19 


H'13 


GA-RC DEREGISTER 


20 


H'14 


GA-RC REGISTER UPDATE UPLINK 


21 


H'15 


GA-RC REGISTER UPDATE DOWNLINK 


22 


H'16 


GA-RC CELL BROADCAST INFO 


23 


H'17 


GA-CSR CIPHERING MODE COMMAND 


32 


H'20 


GA-CSR CIPHERING MODE COMPLETE 


33 


H'21 


GA-CSR ACTIVATE CHANNEL 


48 


H'30 


GA-CSR ACTIVATE CHANNEL ACK 


49 


H'31 


GA-CSR ACTIVATE CHANNEL COMPLETE 


50 


H'32 


GA-CSR ACTIVATE CHANNEL FAILURE 


51 


H'33 


GA-CSR CHANNEL MODE MODIFY 


52 


H'34 


GA-CSR CHANNEL MODE MODIFY 
ACKNOWLEDGE 


53 


H'35 


GA-CSR RELEASE 


64 


H'40 


GA-CSR RELEASE COMPLETE 


65 


H'41 


GA-CSR CLEAR REQUEST 


66 


H'42 


GA-CSR HANDOVER ACCESS 


80 


H'50 


GA-CSR HANDOVER COMPLETE 


81 


H'51 


GA-CSR UPLINK QUALITY INDICATION 


82 


H'52 


GA-CSR HANDOVER INFORMATION 


83 


H'53 


GA-CSR HANDOVER COMMAND 


84 


H'54 


GA-CSR HANDOVER FAILURE 


85 


H'55 


GA-CSR PAGING REQUEST 


96 


H'60 


GA-CSR PAGING RESPONSE 


97 


H'61 


GA-CSR UPLINK DIRECT TRANSFER 


112 


H'70 


GA-CSR DOWNLINK DIRECT TRANSFER 


114 


H'72 


GA-CSR STATUS 


115 


H'73 


GA-RC KEEP ALIVE 


116 


H'74 


GA-CSR CLASSMARK ENQUIRY 


117 


H'75 


GA-CSR CLASSMARK CHANGE 


118 


H'76 


GA-PSR GPRS SUSPENSION REQUEST 


119 


H77 


GA-RC SYNCHRONIZATION INFORMATION 


120 


H'78 


GA-CSR UTRAN CLASSMARK CHANGE 


121 


H'79 


GA-CSR REQUEST 


128 


H'80 


GA-CSR REQUEST ACCEPT 


129 


H'81 


GA-CSR REQUEST REJECT 


130 


H'82 



11 .1 .2 GA-PSR Message header information elements over TCP 

Each GA-PSR message over TCP begins with 8-octet GA-PSR message header. This message header consists of 
Information Elements Length Indicator, Protocol Discriminator, Skip Indicator, Message Type and TLLI, which are 
described in the following sub-clauses. 
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Table 11.1.2.1 : GA-PSR signalling message header contents 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




Length Indicator 


Length Indicator 
11.1.1.1 


M 


V 


2 








GA-PSR Protocol 
Discriminator 


Protocol 

Discriminator 

11.1.1.2 


M 


V 


1/2 


0010 






Skip Indicator 


Skip Indicator 
11.1.1.3 


M 


V 


1/2 


0000 






GA-PSR Message 
Type 


Message Type 
11.1.2.1 


M 


V 


1 








TLLI 


TLLI 
11.1.2.2 


M 


V 


4 








Here continues the list of lE's using TLV coding format and depending on Protocol Discriminator and 
Message Type as defined in clause 10. 



11.1.2.1 Message Type Octet 

The message type octet is the fourth octet in the GA-PSR message header. The bit 8 of Message Type field is the most 
significant bit and bit 1 is the least significant bit. 

Following GA-PSR signalling message types are defined: 

Table 11.1.2.4.1: Message types for GA-PSR signalling 



Message name 


Identity 


GA-PSR-DATA 


1 


GA-PSR-PS-PAGE 


3 


GA-PSR-AGTIVATE-UTG-REQ 


8 


GA-PSR-ACTIVATE-UTC-ACK 


9 


GA-PSR-DEACTIVATE-UTG-REQ 


10 


GA-PSR-DEAGTIVATE-UTC-ACK 


11 


GA-PSR STATUS 


12 



11.1 .2.2 Temporary Logical Link Identity (TLLI) 

Octets 5 to 8 of the GA-PSR message header contain the Temporary Logical Link Identity (TLLI) information element. 
The TLLI identifies the MS this message was sent by or sent to. 

11 .1 .3 GA-PSR Message header information elements over UDP 

Each GA-PSR message over UDP begins with 5-octet GA-PSR data message header. This message header consists of 
Information Elements Message Type and TLLI, which are described in the following sub-clauses. 

Table 11.1.3.1 : GA-PSR data message header contents 



lEI 


Information Element 


Type/Reference 


Presence 


Format 


Length 


Value 


Notes 




GA-PSR Message 
Type 


Message Type 
11.1.3.1 


M 


V 


1 








TLLI 


TLLI 
11.1.3.2 


M 


V 


4 








Sequence Number 


Sequence Number 
11.1.3.3 


M 


V 


2 








Here continues the list of lE's using TLV coding format and depending on Protocol Discriminator and 
Message Type as defined in clause 10. 
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11.1.3.1 GA-PSR Message Type Octet 

The message type octet is the first octet in the GA-PSR message header. The bit 8 of Message Type field is the most 
significant bit and bit 1 is the least significant bit. 

Following GA-PSR data message types are defined: 

Table 1 1 .1 .2.4.1 : Message types for GA-PSR data 



Message name 


Identity 


GA-PSR UNITDATA 


2 


GA-PSR-UFC-REQ 


6 


GA-PSR-DFC-REQ 


7 



1 1 .1 .3.2 Temporary Logical Link Identity (TLLI) 

Octets 2 to 5 of the GA-PSR message header contain the Temporary Logical Link Identity (TLLI) information element. 
The TLLI identifies the MS this message was sent by or sent to. 

1 1 .1 .3.3 Sequence Number 

Octets 6 to 7 of the GA-PSR message header contain the Sequence Number in the range of to 65535. 

11 .1 .4 Information Element Coding principles 

Each information element after the relevant message header is coded using TLV -principle as following: 

The first part of each IE is the Tag-field identifying the Information Element. Tag-field uses 1 or 2 octets. 
The highest bit (bit 8) in the first Tag octet is field extension bit and defines if the 2"'' Tag octet is included. 
If the bit 8 is set to 1, then the field consists of two octets. 

The second part of each IE is the Length-field identifying the Length of the Value-field of Information Element. 
Length-field is coded using either 1 or 2 octets. The highest bit (bit 8) in the first length octet is field extension 
bit and defines if the 2"** length octet is included. If the bit 8 is set to 1, then the field consists of two octets. 

The third part of each IE is the Value-field of Information Element. Length of each Value-field depends on the 
Tag-field and is defined in the sub-clauses below 1 1 .2. 

When the Tag field or the Length field extends over more than one octet, the order of bit values progressively decreases 
as the octet number increases. The least significant bit of the field is represented by the lowest numbered bit of the 
highest numbered octet of the field. 

11.1.5 Network Byte order 

The Network byte order shall be Big-Endian. 
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11 .2 IE Type and Identifiers 



Table 11.2.1 : IE type and identifiers for Unlicensed Radio Resources management 



IE 


Identifier 


Reference 


Mobile Identity 


1 


11.2.1 


GAN Release Indicator 


2 


11.2.2 


Radio Identity 


3 


11.2.3 


GERAN Cell Identity 


4 


11.2.4 


Location Area Identification 


5 


11.2.5 


GERAN/UTRAN coverage Indicator 


6 


11.2.6 


GAN Classmark 


7 


11.2.7 


Geographical Location 


8 


11.2.8 


GANC-SEGW IP Address 


9 


11.2.9 


GANC-SEGW Fully Qualified 
Domain/Host Name 


10 


11.2.10 


Redirection Counter 


11 


11.2.11 


Discovery Reject Cause 


12 


11.2.12 


GAN Cell Description 


13 


11.2.13 


GAN Control Channel 
Description 


14 


11.2.14 


Cell Identifier List 


15 


11.2.15 


TU3907 Timer 


16 


11.2.16 


GSM RR/UTRAN RRC State 


17 


11.2.17 


Routing Area Identification 


18 


11.2.18 


GAN Band 


19 


11.2.19 


GA-CSR State 


20 


11.2.20 


Register Reject Cause 


21 


11.2.21 


TU3906 Timer 


22 


11.2.22 


TU3910 Timer 


23 


11.2.23 


TU3902 Timer 


24 


11.2.24 


L3 Message 


26 


11.2.26 


Channel Mode 


27 


11.2.27 


Mobile Station Classmark 2 


28 


11.2.28 


RR Cause 


29 


11.2.29 


Cipher Mode Setting 


30 


11.2.30 


GPRS Resumption 


31 


11.2.31 


Handover From GAN Command 


32 


11.2.32 


UL Quality Indication 


33 


11.2.33 


TLLI 


34 


11.2.34 


Packet Flow Identifier 


35 


11.2.35 


Suspension Cause 


36 


11.2.36 


TU3920 Timer 


37 


11.2.37 


QoS 


38 


11.2.38 


GA-PSR Cause 


39 


11.2.39 


User Data Rate 


40 


1 1 .2.40 


Routing Area Code 


41 


11.2.41 


AP Location 


42 


11.2.42 


TU4001 Timer 


43 


11.2.43 


Location Status 


44 


11.2.44 


Cipher Response 


45 


11.2.45 


Ciphering Command RAND 


46 


11.2.46 


Ciphering Command MAC 


47 


11.2.47 


Ciphering Key Sequence Number 


48 


11.2.48 


SAPI ID 


49 


11.2.49 


Establishment Cause 


50 


11.2.50 


Channel Needed 


51 


11.2.51 


PDU in Error 


52 


11.2.52 


Sample Size 


53 


11.2.53 


Payload Type 


54 


11.2.54 


Multi-rate Configuration 


55 


11.2.55 


Mobile Station Classmark 3 


56 


11.2.56 


LLC-PDU 


57 


11.2.57 


Location Black List indicator 


58 


11.2.58 


Reset Indicator 


59 


11.2.59 
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IE 


Identifier 


Reference 


TU4003 Timer 


60 


11.2.60 


AP Service Name 


61 


11.2.61 


GAN Service Zone Information 


62 


11.2.62 


RTP Redundancy Configuration 


63 


11.2.63 


UTRAN Classmarl< 


64 


11.2.64 


Classmarl< Enquiry IVIask 


65 


11.2.65 


UTRAN Cell Identifier List 


66 


11.2.66 


Serving GANC table indicator 


67 


11.2.67 


Registration indicators 


68 


11.2.68 


GAN PLMN List 


69 


11.2.69 


Required GAN Services 


71 


11.2.71 


Broadcast Container 


72 


11.2.72 


3G Cell Identity 


73 


11.2.73 


MS Radio Identity 


96 


11.2.3 


GANC IP Address 


97 


11.2.9 


GANC Fully Qualified Domain/ 
Host Name 


98 


11.2.10 


IP address for GPRS user data 
transport 


99 


11.2.9 


UDP Port for GPRS user data 
transport 


100 


11.2.25 


GANC TCP port 


103 


11.2.25 


RTP UDP port 


104 


11.2.25 


RTCP UDP port 


105 


11.2.25 


GERAN Received Signal Level List 


106 


11.2.70 


UTRAN Received Signal Level List 


107 


11.2.70 



11.2.1 Mobile Identity 



The purpose of the Mobile Identity information element is to provide either the international mobile subscriber identity, 
IMSI, the temporary mobile subscriber identity, TMSI/P-TMSI, the international mobile equipment identity, IMEI or 
the international mobile equipment identity together with the software version number, IMEISV. 



octet 1 
octet 2 
Octet 3 



8 


7 


6 5 4 3 2 1 


1 Mobile Identity lEI 


Length of mobile identity contents 


The rest of the IE is coded as in [TS 8] not including lEI and length, 

if present. 



Octet n 



Figure 11.2.1.1: Mobile Identity information element 

1 1 .2.2 GAN Release Indicator 

This information element is used to indicate the GAN Release supported. 

8 7 6 5 4 3 2 1 



GAN Release Indicator lEI 



Length of GAN Release Indicator IE contents 



Spare 



URI 



octet 1 
octet 2 
octet 3 



Figure 11.2.2.1: GAN Release Indicator information element 
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Table 11.2.2.1: GAN Release Indicator information element 



URI, GAN Release Indicator (octet 3) 


Bits 




3 2 1 




1 


Release 1 


All other 


values are reserved in Release 1 . 



1 1 .2.3 Access Identity 



The Access Identity IE is used for transmission of identifiers of the Access Technologies e.g. the Bluetooth Device 
Address (BD_ADDR) or WLAN MAC Address. 



octet 1 
octet 2 

octet 3 
octet 4 
octet 9 



8 


7 6 5 4 3 2 1 


Access Identity IE! 


Length of Access Identity contents 


spare Type of identity 


Access Identity MSB value 


Access Identity LSB value 



Figure 11.2.3.1: Access Identity information element 
Table 11.2.3.1 : Access Identity information element 



Type of Identity (octet 3) 


Bits 








4 3 


2 


1 













IEEE MAC-address format 










1 




1 1 


1 


1 


All other values are for future use. 



11.2.4 GERANCell Identity 



The purpose of the Cell Identity information element is to identify a cell within a location area. 
8 7 6 5 4 3 2 1 



GERAN Cell Identity lEI 



Length of GERAN Cell Identity IE contents 



The rest of the IE is coded as in [8] not including lEI and length, if 

present. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.4.1 GERAN Ce// /denf/fy information element 



1 1 .2.5 Location Area Identification 

The purpose of the Location Area Identification information element is to provide an unambiguous identification of 
location areas within the area covered by the GSM system. 



8 



1 



Location Area Identification I El 



Length of Location Area Identification IE contents 



The rest of the IE is coded as in [24.008] not including lEI and 
length, if present. 



octet 1 
octet 2 
octet 3 



octet n 
Figure 11.2.5.1: Location Area Identification information element 
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1 1 .2.6 GERAN/UTRAN coverage Indicator 

This information element is used to indicate the presence of GERAN/UTRAN coverage in the current MS location. 
8 7 6 5 4 3 2 1 



GERAN/UTRAN coverage Indicator lEI 



Length of GERAN/UTRAN coverage Identity contents 



GCI 



octet 1 
octet 2 
octet 3 



Figure 11.2.6.1 GERAN/UTRAN coverage Indicator information element 
Table 11.2.6.1: GERAN/UTRAN coverage Indicator information element 



GCI, GERAN/UTRAN coverage Indicator (octet 3) 

Normal Service in the GERAN/UTRAN 

1 Limited Service in the GERAN/UTRAN 

2 MS has not found GERAN/UTRAN coverage (LAI information taken from 
SIM, if available) 

3 MS has found GERAN/UTRAN coverage, service state unknown 
4-255 All other values are for future use 



11.2.7 GANCIassmark 

The purpose of the GAN Classmark information element is to provide the network with information concerning aspects 
of both the cellular and generic access interfaces, as well as the support for RTP redundancy of the mobile station 
equipment. 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.7.1: GAN Classmark information element 



8 7 


6 5 4 3 2 


1 


1 GAN Glassmarl< lEI 


Length of GAN Glassmarl< IE contents 


spare 


1 UG 1 GO 1 TGA 






spare 


1 RRS 
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Table 11.2.7.1 : GAN Classmark information element 



TGA, Type of Generic Access (octet 3) 

This field is used to indicate tlie current Generic Access type used by the mobile 

station to access the GAN. 

Bit 

4321 

no radio 

1 Bluetooth 

00 10 WLAN 802.11 

1111 unspecified 

All other values are reserved in Release 1 . 



GC, GERAN Capable (octet 3) 

Bit 

5 

The MS is not GERAN capable. 

1 The IVIS is GERAN capable. 



UG, UTRAN Capable (octet 3) 

Bit 

6 

The IVIS is not UTRAN capable. 

1 The MS is UTRAN capable. 



RRS, RTP Redundancy Support (octet 4) 
Biti 

RTP Redundancy not supported 

1 RTP Redundancy supported 



1 1 .2.8 Geographical Location 



This is a variable length information element providing an estimate of a geographic location of a target MS. 
It is coded as follows: 

8 7 6 5 4 3 2 1 



Geographical Location Indicator IE! 



Length of Geographical Location value contents 



Location estimate 



octet 1 
octet 2 
octet 3-n 



Figure 11.2.8.1: Geographical Location information element 

The Location Estimate field is composed of 1 or more octets with an internal structure according to section 7 in [5]. 

11.2.9 IP Address 

The IP Address information element contains one IP address. 



octet 1 
octet 2 
octet 3 
octet 4 

octet n 



8 


7 


6 5 4 3 


2 


1 


1 IP address lEI 


Length of IP address IE contents 


IP Address type 


Address information MSB 


Address information LSB 



Figure 11.2.9.1: IP address information element 
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Table 11.2.9.1 : IP address information element 



IP address type number value (octet 3) 

Bits 

87654321 

00 10000 1 IPv4 address 

10 10 111 IPv6 address 

All other values shall be interpreted as Ipv4 address 
in this version of the protocol. 



If PDP type number indicates Ipv4, the Address information in octet 4 to octet 7 contains the Ipv4 address. Bit 8 of 
octet 4 represents the most significant bit of the IP address and bit 1 of octet 7 the least significant bit . 

If PDP type number indicates Ipv6, the Address information in octet 4 to octet 19 contains the Ipv6 address. Bit 8 of 
octet 4 represents the most significant bit of the IP address and bit 1 of octet 19 the least significant bit. 



11 .2.1 Fully Qualified Domain/Host Name (FQDN) 

The Fully Qualified Domain/Host Name (FQDN) information element contains the name of a network element (i.e. 
SEGW or a GANG). The information element is coded in string format. 



1 



FQDN IE! 



Length of FQDN IE contents 



FQDN r' character 



FQDN last character 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.10.1: FQDN information element 
Table 11.2.10.1: FQDN information element 



FQDN, Fully Qualified Domain/Host Name value (octet 3 to octet n) 

The FQDN is coded as a string. This means that the 1 ^' character of the string is 
coded in octet 3 and the last character of the string is coded in the last octet of 
this IE (octet n). 



1 1 .2.1 1 Redirection Counter 

The purpose of this information element is to indicate to the GANG the number of times the MS has been redirect and 
still has not obtained service. 



8 



1 



Redirection Counter IE! 



Length of Redirection Counter contents 



Redirection Counter value 



octet 1 
octet 2 
octet 3 



Figure 11.2.11.1: Redirection Counter information element 
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Table 11.2.11.1: Redirection Counter information element 



Redirection Counter value (octet 3 ) 

In ttie Redirection Counter value field bit 8 of octet 3 is the most significant bit 

The value is given in number redirections 

The Redirection Counter value consists of 1 octets. 



11.2.12 Discovery Reject Cause 

The Discovery reject Cause information element contains information to the MS about the reason for a Discovery 
Reject. The MS shall act according to the cause value received. 



8 


7 6 5 4 3 2 1 




1 Discovery Reject Cause lEI 


octet 1 


Length of Discovery Reject Cause IE contents 


octet 2 


Discovery Reject Cause Value 


octet 3 



Figure 11.2.12.1: Discovery Reject Cause information element 
Table 11.2.12.1: Discovery Reject Cause information element 



Discovery Reject Cause (octet 3) 


Bits 


3 2 1 


Network Congestion 


1 Unspecified 


1 IMSI not allowed 


1 


to 


1 1 1 Reserved for future use. 



1 1 .2.1 3 GAN Cell Description 

The purpose of the GAN Cell Description information element is to provide a minimum description of a cell, e.g. to 
identify the GAN in order to be handed over from GERAN/UTRAN. 



8 



1 



GAN Cell Description lEI 



Length of GAN Cell Description value contents 



The rest of the IE is coded as in [12], Cell Description IE, not 
including lEI and length, if present. 



octet 1 
octet 2 
Octet 3 

Octet n 



Figure 1 1 .2.13.1 : GAN Cell Description information element 



1 1 .2.1 4 GAN Control Channel Description 



The purpose of the Control Channel Description information element is to provide a variety of information about the 
GAN service. 
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8 


7 


6 


5 


4 


3 


2 


1 


GAN Control Channel Description lEI 


Length of GAN Control Channel Description contents 


MSCR ATT DTM GPRS NMO ECMC 


spare 


T3212 
time-out value 


RAC 


spare 


3GECS 


PFCFM 


RE 


ECMP 


SGSNR 


ACC15 


ACC14 


ACC13 


ACC12 


ACC11 


ACC10 


ACC09 


AC COS 


ACC07 


ACC06 


AC COS 


ACC04 


AC COS 


ACC02 


ACC01 


AC COO 



octet 1 
octet 2 
octet 3 
octet 4 

octet 5 
octet 6 
octet 7 
octet 8 



Figure 1 1 .2.14.1 : GAN Control Channel Description information element 



Table 1 1 .2.14.1 : GAN Control Channel Description information element 



ECMC, Early Classmark Sending Control (octet 3) 

Bit 

2 

Early Classmark Sending is allowed 

1 Early Classmark Sending is forbidden 

NMO, Network Mode of Operation (octet 3) 

Bit 
43 

Network IVIode of Operation I 

1 Network IVIode of Operation II 

1 Network Mode of Operation III 
1 1 Reserved 

GPRS, GPRS Availability (octet 3) 

Bit 

5 

GPRS available 

1 GPRS not available 

DTM, Dual Transfer Mode of Operation by network (octet 3) 

Bit 

8 

Network does not support dual transfer mode 

1 Network supports dual transfer mode 

ATT, Attach-detach allowed (octet 3) 

Bit 

7 

MSs in the cell are not allowed to apply IMSI attach and detach procedure. 

1 MSs in the cell shall apply IMSI attach and detach procedure. 

MSCR, MSC Release (octet 3) 

Bit 

8 

MSC is Release '98 or older 

1 MSC is Release '99 onwards 
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T3212 timeout value (octet 4) 

The T3212 timeout value field is coded as tlie binary representation of the timeout value for periodic 

updating in decihours. 

Range: 1 to 255 

The value is used for infinite timeout value i.e. periodic updating shall not be used within the cell. 

RAC, Routing Area Code (octet 5) 

This field is the binary representation of the Routing Area Code, see [3]. Bit 8 in octet 1 is the most 

significant bit and bit 1 in octet 1 is the least significant bit. 

SGSNR, SGSN Release (octet 6) 

Bit 

1 

SGSN is Release '98 or older 

1 SGSN is Release '99 onwards 

EClVIP, Emergency Call Mode Preference (octet 8) 

Bit 

2 

GSM GERAN is preferred for Emergency calls 

1 GAN is preferred for Emergency calls 

RE, Call reestablishment allowed (octet 8) 

Bit 

3 

Call Reestablishment allowed in the cell 

1 Call Reestablishment not allowed in the cell 

PFCFIVI, PFC_FEATURE_MODE (octet 6) 

Bit 

4 

The network does not support packet flow context procedures. 

1 The network supports packet flow context procedures. 

3GECS, 3G Early Classmark Sending Restriction (octet 6) 

Bit 

5 

UTRAN classmark change message shall be sent with the Early classmark sending 

1 The sending of UTRAN Classmark Sending messages is controlled by the Early Classmark 
Sending Control parameter 

AC CN, Access Control Class N (octet 7 and octet 8) 

These fields are specified and described in 3GPP TS 44.01 8 and 3GPP TS 22.01 1 . 



11.2.15 Cell Identifier List 

The Cell Identifier List information element is used to transfer multiple Cell Global Identifications in GAN. 
8 7 6 5 4 3 2 1 



GAN Cell Identifier List lEI 



Length of GAN Cell Identifier List value contents 



The rest of the IE is coded as in [1 6], not including lEI and length, if 

present 



octet 1 
octet 2 
octet 3 

Octet n 



Figure 1 1 .2.15.1 : Cell Identifier List information element 

NOTE: Cell identification discriminator "The whole Cell Global Identification, CGI" as defined in [48.008] shall 
be used. 
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11.2.16 TU3907 Timer 

The purpose of this information element is to indicate to the MS the minimum period of time it should wait before 
attempting Registration at the current GANC. 



8 



1 



TU3907 Timer lEI 



Lengtii of TU3907 Timer IE contents 



TU3907 Timer value MSB 



TU3907Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.16.1: TU3907 Timer information element 
Table 11.2.16.1: TU3907 Timer information element 



TU3907 Timer value (octet 3 and 4) 

In the TU3907 Timer value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU3907 Timer value consists of 2 octets. 



11.2.17 GSM RR/UTRAN RRC State 

This information element is used to indicate the state of the GSM RR or UTRAN RRC entity when the MS is 
registering for GAN service. If GSM-RR is the current serving RR entity, information about GSM RR shall be included 
and if UTRAN-RRC is the current serving RR entity, information about UTRAN RRC shall be included. 



8 


7|6|5|4|3|2|1 






GSM RR/UTRAN RRC State lEI 


octet 1 


Length of GSM RR/ UTRAN RRC State contents 


octet 2 


Spare GRS 


octet 3 



Figure 11.2.17.1 GSM RR/UTRAN RRC State information element 



Table 11.2.17.1: GSM RR/UTRAN RRC State information element 



GRS, GSM RR/UTRAN RRC State (octet 3) 
Bits 1 -3 

GSM RR Is in IDLE state. 

1 GSM RR is in DEDICATED state. 

1 UTRAN RRC is in IDLE STATE 

1 1 UTRAN RRC is in CELL_DCH STATE 

1 UTRAN RRC is in CELL_FACH STATE 
1 1 1 Unknown 



All other values are reserved for future use. 



11.2.18 Routing Area Identification 



The purpose of the routing area identification information element is to provide an unambiguous identification of 
routing areas within the GPRS coverage area. 
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Routing Area Identification lEI 



Length of Routing Area Identification contents 



The rest of the IE is coded as in [8] not including lEI and length, if 

present. 



octet 1 
octet 2 
Octet 3 

Octet 8 



Figure 11.2.18.1: Routing Area Identification information element 

11.2.19 GANBand 

The GAN Band information element is used to indicate to the mobile station the GSM Band that is associated with the 
GANG. The mobile station uses this information to construct correctly the MS Classmark 2 information element. 



octet 1 
octet 2 
octet 3 



8 


7 6 5 4 3 2 


1 


1 GAN Band lEI 


Length of GAN Band contents 


Spare GAN Band 



Figure 11.2.19.1: GAN Band information element 



Table 11.2.19.1: GAN Band information element 



GAN Band (4 bit field) 

This field indicates the band applicable for the parameters in this structure. 

Bits 4 - 1 

4321 

E-GSIVI is supported 

1 P-GSIVI is supported 

10 GSIV1 1 800 is supported 

11 GSIVI 450 is supported 

10 GSIVI 480 is supported 

10 1 GSIVI 850 is supported 

110 GSIV1 1 900 is supported 

111 GSIVI 700 is supported 

All other values are reserved for future use and shall not be interpreted as an error. 



11.2.20 GA-RC State 

This information element is used to indicate the state of the MS GA-RC entity to the GANG. 



8 


7 


1 6 1 5 1 4 1 3 1 


2 1 1 






GA-RC State lEI 


octet 1 


Length of GA-RC State contents 


octet 2 






Spare | 


URS 


octet 3 



Figure 11.2.20.1 GA-RC State information element 
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Table 1 1 .2.20.1 : GA-RC State information element 



URS, GA-RC State (octet 3) 


Bits 2-1 




21 






00 


GA-RC 


is in GA-RC-IDLE state. 


01 


GA-RC 


is in GA-RC-DEDICATED state. 


1 


GA-RC 


is in GA-RC-REGISTERED state. 



1 1 .2.21 Register Reject Cause 

This information element contains the reason for Register reject. 



8 


7 6 5 4 3 2 


1 


Register Reject Cause lEI 


Length of Register Reject Cause IE contents 


RRC 



octet 1 
octet 2 
octet 3 



Figure 1 1 .2.21 .1 : Register Reject Cause information element 
Table 1 1 .2.21 .1 : Register Reject Cause information element 



Register Reject Cause (octet 3) 





Networl< Congestion 


1 


AP not allowed 


2 


Location not allowed 


3 


Invalid GANC 


4 


Geo Location not known 


5 


IMSI not allowed 


6 


Unspecified 


7 


GANC-SEGW certificate not valid 


8 


EAP SIIVI authentication failed 


9 


TCP establishment failed 


10 


Redirection 


11 


EAP-AKA Authentication failed 


12 to 


Reserved for future use. 


255 





11.2.22 TU3906 Timer 

The TU3906 Timer information element contains the value for the GA-RC Keep Alive mechanism, as described in 
section 5.5. 



8 



1 



TU3906 Timer IE! 



Length of TU3906 Timer IE contents 



TU3906 Timer value MSB 



TU3906 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.22.1: TU3906 Timer information element 
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Table 11.2.22.1 : TU3906 Timer information element 



TU3906 Timer value (octet 3 and 4) 

In the TU3906 Timer value field bit 8 of octet 3 is the most significant bit and bit 1of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU3906 Timer value consists of 2 octets. 



11.2.23 TU3910 Timer 

When the MS roves out, it shall start timer TU3910 and shall not rove in until this timer has expired, unless the MS has 
detected loss of GERAN coverage. 



8 



1 



TU3910 Timer lEI 



Length of TU3910 Timer IE contents 



TU3910 Timer value MSB 



TU3910 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.23.1: TU3910 Timer information element 



Table 11.2.23.1: TU3910 Timer information element 



TU391 Timer (octet 3 and 4) 

In the TU3910 Timer value field bit 8 of octet 3 is the most significant bit and bit 1of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU3910 value consists of 2 octets. 



11.2.24 TU3902 Timer 

The purpose of this information element is to indicate to the MS the minimum period of time it should wait before 
attempting the Discovery procedure again. 



8 



1 



TU3902 Timer lEI 



Length of TU3902 Timer IE contents 



TU3902 Timer value MSB 



TU3902 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.24.1: TU3902 Timer information element 
Table 11.2.24.1: TU3902 Timer information element 



TU3902 Timer value (octet 3 and 4) 

In the TU3902 Timer value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU3902 Timer value consists of 2 octets. 
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1 1 .2.25 Communication Port Identity 



The Communication Port Identity information element is used to identify the TCP or UDP port for the connection. 



8 



1 



Communication Port Identity lEI 



Length of Communication Port Identity IE contents 



Communication Port IVISB value 



Communication Port LSB value 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.25.1: Communication Port information element 



1 1 .2.26 L3 Message 



The L3 message information element contains upper layer messages to be transported using the GA-RC protocol 
between the MS and the core network. 



octet 1 
octet 2 
octet 3 



8 


7 6 5 4 3 2 


1 




L3 message lEI 




Length of L3 message IE contents 


L3 message contents, 1 st octet 




L3 message contents, last octet 



8 


7 


6 


5 4 3 2 1 


Channel IVIode lEI 






Length 


of Channel Mode IE contents 


The rest of the IE is coded as in [1 2], not including lEI and length, if 

present 



octet n 
Figure 11.2.26.1: L3 message information element 

11.2.27 CInannel Mode 

The Channel Mode information element gives information of the mode on coding/decoding and transcoding. The exact 
mode is determined by the contents of this IE and the channel type. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.27.1: Channel Mode information element 

Note 1: Support for AMR FR codec, as specified in 3GPP TS 26.071 [7], is mandatory when operating in GAN mode, 
with support for other codecs being optional. 

1 1 .2.28 Mobile Station Classmark 2 

The purpose of the Mobile Station Classmark 2 information element is to provide the network with information 
concerning aspects of both high and low priority of the mobile station equipment. This affects the manner in which the 
network handles the operation of the mobile station. The Mobile Station Classmark information indicates general 
mobile station characteristics and it shall therefore, except for fields explicitly indicated, be independent of the 
frequency band of the channel it is sent on. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.28.1: Mobile Station Classmark 2 information element 



8 


7 


6 5 4 3 2 1 


Mobile station classmark 2 lEI 


Length of mobile station classmark 2 contents 


The rest of the IE 


is coded as in [8], not including lEI and length, if 
present 
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8 


7 


6 5 4 3 2 1 


1 RR Cause lEI 


Length of RR Cause contents 


The rest of the IE 


is coded as in [12], not including lEI and length, if 
present 



11.2.29 RR Cause 

The purpose of the RR Cause information element is to provide the reason for release or the reason for completion of an 
assignment or handover. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.29.1: RR Cause information element 

11.2.30 Cipher Mode Setting 

The purpose of the Cipher Mode Setting information element is to indicate whether stream ciphering shall be started or 
not and if it is to be started, which algorithm to use. It is not used for ciphering when the MS is in GAN mode, but after 
Handover from GAN in the target RAT. 



octet 1 
octet 2 
octet 3 



Figure 11.2.30.1: Cipher Mode Setting information element 

Note: The coding of fields SC and algorithm identifier is defined in [44.018] as part of the Cipher Mode Setting IE. 



8 


7 6 5 


4 3 2 


1 


Cipher Mode Setting lEI 


Length of Cipher IVIode Setting IE contents 


spare 


algorithm identifier 


SC 



1 1 .2.31 GPRS Resumption 



The purpose of the GPRS Resumption information element is to indicate whether the network has successfully resumed 
GPRS services or not. 



octet 1 
octet 2 
octet 3 



8 


7 


6 5 4 3 2 1 


GPRS Resumption lEI 


Length of GPRS Resumption contents 


The rest of the IE is coded as in [1 2], not including lEI and length. If 

present 



octet n 



Figure 11.2.31.1 : GPRS Resumption information element 

1 1 .2.32 Handover From GAN Command 

The purpose of Handover From GAN Command information element is to provide information to the MS of handover 
from GAN. The Handover From GAN Command information element contains all information needed by the MS for 
handover from GAN. 



8 



1 



Handover from GAN Command lEI 



Length of Handover from GAN Command value contents 



If the target RAT is GERAN, the rest of the IE is coded as 

HANDOVER COIVIMAND message in [12] If the target RAT is 

UTRAN, the rest of the IE is coded as HANDOVER TO UTRAN 

COMMAND message in [TS 25.331] 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.32.1: Handover From GAN Command information element 
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11.2.33 UL Quality Indication 



This information element provides an indication to the MS that the GAN has detected insufficient signal quality on the 
uplink or is unable to support the service on the broadband network, thereby requiring the MS to trigger a Handover by 
providing the necessary information regarding the potential target cells in the other RAT. Handover from GAN can be 
triggered by GAN only if the MS has indicated presence of GSM coverage previously in the Register or Register 
Update messages. 



octet 1 
octet 2 
octet 3 



Figure 11.2.33.1: UL Quality Indication information element 
Table 11.2.33.1: UL Quality Indication information element 



8 


7 6 5 


4 3 2 


1 


UL Quality Indication lEI 


Length of UL Quality Indication contents 


Spare 


ULQI 



ULQI 
Bits 


UL Quality Indication (octet 3) 


4 3 


2 


1 





1 
10 
10 
Qther values 


Quality ok 
Radio problem 
Network problem 
Undetermined problem 
are reserved for future use. 



11.2.34 TLLI 

The purpose of the TLLI information element is to provide the Temporary Logical Link Identifier. 
8 7 6 5 4 3 2 1 



TLLI lEI 



Length of TLLI value contents 



The rest of the IE is coded as in [1 2], not including lEI and length, if 

present. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.34.1: TLLI information element 

1 1 .2.35 Packet Flow Identifier 

The Packet Flow Identifier (PFI) information element indicates the Packet Flow Identifier for a Packet Flow Context. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.35.1: Packet Flow Identifier information element 

1 1 .2.36 Suspension Cause 

The purpose of the Suspension Cause information element is to provide the reason for the GPRS suspension. 



8 


7 


6 5 4 3 


2 1 


Packet Flow Identifier lEI 


Length of Packet Flow Identifier value contents 


The rest of the IE 


is coded as in [8], not including lEI 
present. 


and length, if 
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8 


7 6 5 4 3 


2 1 


Suspension Cause lEI 


Length of Suspension Cause value contents 


Tlie rest of the IE is coded as in [1 2], not including 

present. 


lEI and length, if 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.36.1: Suspension Cause information element 



11.2.37 TU3920 Timer 

The purpose of this information element is to indicate to the MS the maximum period of time it should wait before 
aborting the Handover to GAN procedure. 



8 



1 



TU3920 Timer IE! 



Length of TU3920 Timer IE contents 



TU3920 Timer value MSB 



TU3920 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.37.1: TU3920 Timer information element 
Table 11.2. 37.1 : TU3920 Timer information element 



TU3920 Timer value (octet 3 and 4) 

In the TU3920 Timer value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 
4 the least significant bit. 

The value is given in number of hundreds of milliseconds. 

The TU3920 Timer value consists of 2 octets. 



11.2.38 QoS 

This information element indicates the QoS Profile associated with a PDU. 



8 


7 


6 5 


4 3 2 1 




QoS IE! 


Length of QoS value contents 


spare 


RLC_MQDE 


RADIQ_PRIORITY 


PEAK_THRQUGHPUT_CLASS 



octet 1 

octet 2 
octet 3 



Figure 11.2.38.1: QoS information element 
Table 11.2.38.1: QoS information element 
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PEAK_THROUGHPUT_CLASS (octet 3, bits 1-4) 

This field is coded as PEAK_THROUGHPUT_CLASS field in 
the Channel Request Description information 
element specified in [43] 

RADIO_PRIORITY (octet 3, bits 5-6) 

This field is coded as RADIO_PRIORITY field in the 
Channel Request Description information 
element specified in [43] 

RLC_MODE (octet 3, bit 7) 

This field is coded as RLC_IVIODE field in the 
Channel Request Description information 
element specified in [43] 



11.2.39 GA-PSR Cause 

This information element indicates the status related to GAN specific signalling procedures. 



8 


7 6 5 4 3 2 


1 


1 GA-PSR Cause IE! 


Length of GA-PSR Cause value contents 


GA-PSR Cause value 



octet 1 
octet 2 
octet 3 



Figure 11.2.39.1: GA-PSR Cause information element 



Table 11.2.39.1 GA-PSR Cause value 



GA-PSR Cause (octet 3) 

Value 

"success" 

2 "no available resources" 

3 "GANC failure" 

4 "not authorized for data service" 

5 "message type non existent or not implemented" 

6 "message type not compatible with the protocol state" 

7 "invalid mandatory information" 

8 "syntactically incorrect message" 

9 "GPRS suspended" 

10 "normal deactivation" 

12 "conditional IE error" 

13 "semantically incorrect message" 

All other values are for future use. 



1 1 .2.40 User Data Rate 

This information element indicates the User Data Rate used in flow control procedures: 
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8 


7 6 5 4 3 2 


1 


1 User Data Rate lEI 


Length of User Data Rate value contents 


R Value (MSB) 




R Value (LSB) 



Figure 1 1 .2.40.1 : User Data Rate IE 
Table 11.2.40.1 : User Data Rate IE 



octet 1 
octet 2 
octet 3 

octet 4 

octet 5 



R value (octets 3, 4 and 5) 

In the R value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 5 the least 
significant bit. 

The R field is the binary encoding of the rate information expressed in 100 bits/sec 
increments, starting from x 100 bits/sec until 16777215 x 100 bits/sec (1.6 Gbps). 



11.2.41 Routing Area Code 



The purpose of the Routing Area Code IE is to provide an unambiguous identification of routing areas within a location 
area. 



octet 1 
octet 2 
octet 3 



Figure 11.2.41.1: Routing Area Code information element 

1 1 .2.42 AP Location 

The AP Location information element is to indicate the location of the MS or AP to the network. 
8 7 6 5 4 3 2 1 



8 


7 


6 5 4 3 2 1 


Routing Area Code lEI 


Length of the Routing Area Code value contents 


The rest of the IE 


is coded as in [3] not including lEI and length, if 
present. 



AP Location lEI 



Length of AP Location contents 



The rest of the IE is coded as in [25], not including lEI and length, if 

present 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.42.1: AP Location information element 

11.2.43 TU4001 Timer 

The purpose of this information element is to indicate to the MS the minimum period of time it should wait before 
deactivating an idle GA-PSR Transport Channel. 
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TU4001 Timer lEI 



Length of TU4001 Timer IE contents 



TU4001 Timer value MSB 



TU4001 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.43.1: TU4001 Timer information element 
Table 11.2.43.1: TU4001 Timer information element 



TU4001 Timer value (octet 3 and 4) 

In the TU4001 Timer value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU4001 Timer value consists of 2 octets. 



1 1 .2.44 Location Status 

This information element indicates whether the GANC is able to identify the location for the specific MS. Based on 
network or operator policy, the network may accept a Registration Request from a MS, even if the location of the MS 
(or AP) is not known in the network. This IE may be used by the MS to provide an indication to the user as to whether 
the MS's location is known. 



octet 1 
octet 2 
octet 3 



Figure 11.2.44.1 Location Status information element 
Table 11.2.44.1: Location Status information element 



8 


7 6 5 4 3 2 1 


Location Status lEI 


Length of Location Status value contents 


Spare LS 



LS, Location Status (octet 3) 

Bit 

21 

IVIS location known 

1 MS location unknown 

All other value are for future use 



1 1 .2.45 Cipher Response 



The purpose of the Cipher Response information element is to indicate to the mobile station which information the 
mobile station has to include in the GA-CSR CIPHERING MODE COMPLETE message. 



octet 1 
octet 2 
octet 3 



Figure 1 1 .2.45.1 : Cipher Response information element 
Table 1 1 .2.45.1 : Cipher Response information element 



8 


7 6 5 4 3 2 


1 


Cipher Response lEI 


Length of Cipher Response contents 


Spare 


CR 



CR Cipher Response (octet 1) 
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Bit 
1 

IMEISV shall not be included 

1 IMEISV shall be included 



1 1 .2.46 Ciphering Command RAND 

The Ciphering Command RAND information element contains the random number to be used for computing the MAC 
by the MS, to authenticate that the MS has the correct key Kc. 



8 



1 



Ciphering Command RAND lEI 



Length of Ciphering Command RAND contents 



Ciphering Command RAND value part 



octet 1 
octet 2 
octet 3-18 



Figure 1 1 .2.46.1 : Ciphering Command MAC information element 

The GANC generates the random number using the same pseudo-random fGANCtion as first cryptographic suite as 
defined in the profile for IKEv2 in [37]. 

1 1 .2.47 Cipinering Command MAC 

The Ciphering Command MAC information element contains the Message Authentication Code computed by the MS, 
to authenticate that the MS has the correct key Kc. 



8 



1 



Ciphering Command IVIAC lEI 



Length of Ciphering Command IVIAC contents 



Ciphering Command I\/1AC value part 



octet 1 
octet 2 
octet 3-1 4 



Figure 1 1 .2.47.1 : Ciptiering Command IVIAC information element 

The MAC is computed as defined in sub-clause 7.9.2. 

1 1 .2.48 Cipinering Key Sequence Number 

The purpose of the Ciphering Key Sequence Number information element is to make it possible for the network to 
identify the ciphering key Kc which is stored in the mobile station without invoking the authentication procedure. 

The ciphering key sequence number is allocated by the network and sent with the AUTHENTICATION REQUEST 
message to the mobile station where it is stored together with the calculated ciphering key Kc. 



octet 1 
octet 2 
octet 3 



Figure 1 1 .2.48.1 : Ciphering Key Sequence Number information element 



8 


7 6 5 4 


3 2 1 


Ciphering Key Sequence lEI 


Length of Ciphering Key Sequence IE contents 


spare 


key sequence 
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Table 1 1 .2.48.1 : Ciphering Key Sequence Number information element 



Key sequence (octet 1) 

Bits 

3 2 1 



through Possible values for the ciphering key 

1 1 sequence number 

1 1 1 No key is available (MS to network); 
Reserved (network to MS) 



11.2.49 SAPI ID 

The SAPI ID IE is used by the MS to indicate the SAPI value for the upper layer message. 
8 7 6 5 4 3 2 1 



1 SAPI ID lEI 


Length of SAPI ID IE contents 


Spare 


SAPI ID 



Figure 11.2.49.1: SAPI ID information element 
Table 11.2.49.1: SAPI ID information element 



SAPI ID, SAPI Identifier (octet 3) 

Bits 

3 2 1 

SAPI (all other except SMS) 

1 1 SAPI 3 (SMS) 

All other values are undefined in Release 1 . 



octet 1 
octet 2 
octet 3 



1 1 .2.50 Establishment Cause 

The Establishment Cause IE is used by the MS the indicate the type of the transaction being initiated to the network. 



8 


7 6 5 4 3 2 1 




Establishment Cause IE! 




Length of Establishment Cause IE contents 


Establishment Cause 



octet 1 
octet 2 
octet 3 



Figure 11.2.50.1: Establishment Cause information element 
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Table 11.2.50.1: Establishment Cause information element 



Establishment Cause (octet 3) 



Bits 8 ... 1 
1010 0000 
1100 0000 

0000 0000 

0001 0000 

0010 0000 

0011 0000 
1000 0000 

0100 0000 

0101 0000 

1110 0000 

1111 0000 



Emergency 

Call re-establishment 

Location Update 

Other SDCCH procedures including MS\ Detach, SMS, SS, paging response 

// note: Paging response for "SDCCH needed" is using codepoint "0001 0000" 

Paging response (TCH/F needed) 

Paging response (TCH/F or TCH/H needed) 

Paging response ("any channel" needed) 

Originating speech call from dual-rate mobile station when TCH/H is sufficient 

Originating data call from dual-rate mobile station when TCH/H is sufficient 

Originating speech call and TCH/F is needed 

Originating data call and TCH/F is needed 



All other values are undefined in Release 1 . 



11.2.51 Channel Needed 

The Channel Needed IE is equivalent to the Channel Needed IE specified in [12] and is coded as per following 
definition: 



octet 1 
octet 2 
octet 3 



8 


7 6 5 4 3 


2 1 


Channel Needed lEI 


Length of Channel Needed IE contents 


spare 


CHANNEL 
(first) 



Figure 11.2.51.1: Channel Needed information element 
Table 11.2.51.1: Channel Needed information element 



CHANNEL (octet 3) 
Bits 


2 


1 









1 


Any channel. 
SDCCH. 


1 
1 



1 


TCH/F (Full rate). 

TCH/H or TCH/F (Dual rate). 



11.2.52 PDU in Error 

The PDU in Error IE contains a faulty message returned to the sender of the message. 



8 


7 


6 5 4 3 


2 


1 


1 PDU in Error lEI 


Length of PDU in Error contents 


PDU in Error, 1st octet 


PDU in Error, last octet 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.52.1: PDU in Error information element 
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11.2.53 Sample Size 



The Sample Size IE is used by the network to indicate the minimum size of the CS payload frames to be included in 
each RTP/UDP packet. It is also used by the MS to indicate to the network the sample size used by the MS and to be 
applied by the network in the downlink. 



octet 1 
octet 2 
octet 3 



8 


7 6 5 4 3 2 


1 




Sample Size lEI 




Length of Sample Size IE contents 


Sample Size 



Figure 1 1 .2.53.1 : Sample Size information element 
Table 1 1 .2.53.1 : Sample Size information element 



Sample Size (octet 3) 

20 20 ms of CS payload included In each RTP/UDP packet 

40 40 ms of CS payload included in each RTP/UDP packet 

60 60 ms of CS payload included in each RTP/UDP packet 

80 80 ms of CS payload included in each RTP/UDP packet 

All other values are undefined in Release 1 . 



11.2.54 Payload Type 

The Payload Type IE is used to indicate the RTP Payload Type for dynamically assigned Payload Type. 



octet 1 
octet 2 
octet 3 



8 


7 


6 5 4 3 2 


1 




Payload Type lEI 




Length of Payload Type IE contents 


Payload Type 



Figure 11.2.54.1: Payload Type information element 
Table 11.2.54.1: Payload Type information element 



Payload Type (octet 3) 

Allowed values are between 96 and 1 27. 

All other values are undefined in Release 1 . 



1 1 .2.55 Multirate Configuration 

The MultiRate configuration information element gives parameters related to a multi-rate speech codec. 



8 



1 



Multirate Configuration lEI 



Length of Multirate Configuration contents 



The rest of the IE is coded as in [1 2], not including lEI and length, if 

present. The included Threshold and Hysteresis values shall be 

coded according to Table 1 1 .2.55.1 . 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.55.1: Multirate Configuration information element 
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Table 11.2.55.1 : MultiRate configuration information element 



Octet 3 - n 








Threshold 


Frame Loss 


Hysteresis Frame Loss 


value 


Ratio 


value 



Ratio 
= 0% 





0% 


1 


0.25 % 


1 


= 0.25% 






2 


= 0.5% 


19 


4.75 % 


3 


= 0.75% 


20 


5% 


4 


= 1 % 


21 


5.5 % 


5 


= 1.5% 






6 


= 2% 


39 


14.5% 


7 


= 2.5% 


40 


15% 


8 


= 3% 


41 


16% 


9 


= 4% 






10 


= 5% 


50 


25% 


11 


= 6% 


51 


26% 


12 


= 8% 


52 


28% 


13 


= 10% 






14 


= 13% 


62 


48% 


15 


= 17% 


63 


50% 






The Frame Loss Ratio is the number of missing speech frames, 


20ms, at the 


receiver, divided by the total 


no of expected speech 


frames for the complete speech 


signal, 50 


per second. 


A one second filter shall be applied to the frame loss ratio before 


comparing it with the threshold and hysteresis values according to 


appendix A.I 


.1. 







1 1 .2.56 Mobile Station Classmark 3 

The purpose of the Mobile Station Classmark 3 information element is to provide the network with information 
concerning aspects of the mobile station. The contents might affect the manner in which the network handles the 
operation of the mobile station. The Mobile Station Classmark information indicates general mobile station 
characteristics and it shall therefore, except for fields explicitly indicated, be independent of the frequency band of the 
channel it is sent on. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.56.1: IVIobile Station Classmark 3 information element 

11.2.57 LLC-PDU 

This information element contains an LLC-PDU. The element coding is: 



octet 1 
octet 2,2a 
octet 3 

octet n 



8 


7 


6 5 4 3 2 1 


Mobile station classmark 3 lEI 


Length of mobile station classmark 3 contents 


The rest of the IE 


is coded as in [8], not including lEI and length, if 
present 



8 


7 6 5 4 3 2 1 




LLC-PDU lEI 




Length of LLC-PDU contents 


The rest of the IE is coded as in [19], not including lEI and length, if 

present 



Figure 11.2.57.1: LLC-PDU information element 
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1 1 .2.58 Location Black List indicator 

The Location Black List indicator information element is used to indicate which part of the Location Area Identification 
is to be added in the Location Black List. 



Location Black List indicator lEI 



Lengtii of Location Black List indicator contents 



Spare 



LBLI 



octet 1 
octet 2 
octet 3 



Figure 11.2.58.1: Location Black List indicator information element 
Table 11.2.58.1: Location Black List indicator information element 



LBLI, Location Black List indicator (octet 3) 

Bits 

3 2 1 

MCC 

1 MCC and MNC 

1 MCC, MNC and LAC 

All other values are undefined in Release 1 . 



1 1 .2.59 Reset Indicator 

The Reset Indicator information element is used to signal to the MS when the flow control procedure is complete and 
the MS can reset the maximum uplink data rate to normal level. 



8 


7 6 5 4 3 2 


1 1 






Reset Indicator lEI 


octet 1 


Length of Reset Indicator contents 


octet 2 




Spare 


1 Rl 


octet 3 



Figure 11.2.59.1 Reset Indicator information element 
Table 11.2.59.1: Reset Indicator information element 



Rl, Reset Indicator (octet 3) 

Bit 

1 

The flow control condition continues to exist. 

1 The flow control condition no longer exists. 



11.2.60 TU4003 Timer 

The purpose of this information element is to indicate to the MS how often it is allowed to send flow control messages. 



TU4003 Timer lEI 



Length of TU4003 Timer IE contents 



TU4003 Timer value MSB 



TU4003 Timer value LSB 



octet 1 
octet 2 
octet 3 
octet 4 



Figure 11.2.60.1: TU4003 Timer information element 
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Table 11.2.60.1 : TU4003 Timer information element 



TU4003 Timer value (octet 3 and 4) 

In the TU4003 Timer value field bit 8 of octet 3 is the most significant bit and bit 1 of octet 
4 the least significant bit. 

The value is given in number of seconds. 

The TU4003 Timer value consists of 2 octets. 



11.2.61 AP Service Name 

The AP Service Name element contains either the SSID or the PAN Service Name of the unHcensed AP being used. 
8 7 6 5 4 3 2 1 



AP Service Name I El 



Length of AP Service Name IE contents 



AP Service Name type 



AP Service Name IVISB 



AP Service Name LSB 



octet 1 
octet 2 
octet 3 
octet 4 

octet n 



Figure 11.2.61.1: AP Service Name information element 
Table 11.2.61.1: AP Service Name information element 



AP Service Name type number value (octet 3) 

Bits 

87654321 

0000000 1 SSID 

1 PAN Service Name 

All other values are undefined in Release 1 . 

AP Service Name value (octet 4 to octet n) 

The AP Service Name is coded as a string. This means that the 1^' character of the 
string is coded in octet 4 and the last character of the string is coded in the last octet of 
this IE (octet n). 



1 1 .2.62 GAN Service Zone Information 

The purpose of the GAN Service Zone Information information element is to provide the mobile station with GAN 
Service Zone related information applicable to the current location of the user. It consists of two fields. GAN Service 
Zone Name string can be used by the GANG to indicate textual information related to the location. GAN Service Zone 
Icon Indicator can be used by the GANG to turn on various indicators in the mobile station. 



ext 



GAN Service Zone Information lEI 



Length of GAN Service Zone Information value contents 



GAN Service Zone Icon Indicator 



Length of GAN Service Zone string 



GAN Service Zone string, 1 character 



GAN Service Zone string, last character 



octet 1 
octet 2,2a 
octet 3 
octet 4 
octet 5 

octet n 



Figure 1 1 .2.62.1 : GAN Service Zone Information information element 



£75/ 



3GPP TS 44.318 version 6.1.0 Release 6 



133 



ETSI TS 144 318 V6.1.0 (2005-07) 



Table 1 1 .2.62.1 : GAN Service Zone Information information element 



GAN Service Zone Icon Indicator, octet 3 

Value 

1 Unlimited Calls 

1 28-254 Operator specific values 

All other values are reserved. 

GAN Service Zone Name, octets 4-n 

The GAN Service Zone Name is coded as a string with a length indicator. This 
means that the 1^' octet of the field (octet 4) defines the length of the string and 
1^' character of the string is coded in octet 5 and the last character of the string 
is coded in the last octet of this field (octet n). Maximum length of each string is 
32 octets. 



1 1 .2.63 RTP Redundancy Configuration 

The RTP Redundancy configuration information element provides the parameters related to redundancy policy for the 
FR AMR active codec set. For each mode of the AMR codec set, the redundancy level is indicated i.e. no redundancy 
(window size 1), single redundant frame (window size 2), double redundant frames (window size 3). The mode for 
encoding redundant frames can be equal to or lower than the mode for the primary encoding. 

For each mode of the AMR Active Mode Set, as signaled in the Multi-rate Configuration IE, the window size for 
including redundant frames is indicated. So if e.g. the Active Mode Set contains four active modes, then the 
Redundancy Configuration IE consists of six octets, of which four indicate the Codec Mode to Window Size mapping. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.63.1: Redundancy Configuration information element 



8 7 


6 5 4 3 


2 1 


RTP Redundancy Configuration IE! 


Length of RTP Redundancy Configuration IE contents 


Codec IVIode 


Spare 


Window Size 



Table 11.2.63.1: Redundancy configuration IE 



Window Size (octet 3 to octet n) 

Bits 

2 1 

Window size 1, No redundancy 

1 Window size 2 (single redundancy) 

1 Window size 3 (double redundancy) 

All other values are reserved 

Codec Mode (octet 3 to octet n) 

Bits 

8 7 

The Codec IVIode is coded as in [TS 45.009] sub- 
clause 3.4.1 



1 1 .2.64 UTRAN Classmark 

The UTRAN Classmark information element includes the INTER RAT HANDOVER INFO (defined in 
3GPP TS 25.331) which gives UTRAN related information to the network (target system) for the purpose of 
intersystem handover. 
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8 


7 6 5 4 3 2 


1 


1 UTRAN Classmark lEI 


Length of UTRAN Classmark contents 


The rest of the IE is the INTER RAT HANDOVER INFO coded 
[TS 25.331], not including lEI and length, if present 


as in 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.64.1: UTRAN Classmark information element 

1 1 .2.65 Classmark Enquiry Mask 

The Classmark Enquiry mask defines the information to be returned to the network. The bit mask defines the specific 
information to be returned, such as UTRAN specific information and/or requests the sending of the GA-CSR 
CLASSMARK CHANGE message.. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.65.1: Classmark Enquiry Mask information element 

1 1 .2.66 UTRAN Cell Identifier List 

The UTRAN Cell Identifier List information element is used to transfer multiple UTRAN target cell identifiers in GAN 
mode for the purpose of Inter-system HO. 



8 


7 6 5 4 3 2 


1 


Classmark Enquiry IVIask lEI 


Length of Classmark Enquiry Mask contents 


The rest of the IE is the Classmark Enquiry IVIask coded as in 
44.018], not including lEI and length, if present 


[TS 



8 



1 



UTRAN Cell Identifier List lEI 



Length of UTRAN Cell Identifier List value contents 



Spare 



UTRAN Cell Identification 
Discriminator 



UTRAN Cell Identification 1 



octet 1 
octet 2 
octet 3 

octet 4 



UTRAN Cell Identification n 



Figure 1 1 .2.66.1 : UTRAN Cell Identifier List information element 

The coding of octet 2 is a binary number indicating the length of the remaining element. The length depends on the 
UTRAN Cell Identification Discriminator (octet 3). 

The "UTRAN Cell Identification Discriminator" is coded as follows: 

0000 PLMN-ID, LAC and a 28-bit Cell Id are used to identify the target UTRAN cell. 

All other values are reserved. 

The coding of the UTRAN Cell Identifications 1 to n (octets 4 to 4H-nm) depends on the Cell identification discriminator 
(octet 3). Below the coding is shown for each UTRAN Cell Identification Discriminator: 

Coding of Cell Identification for UTRAN Cell Identification Discriminator = 0000 
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Table 11.2.66.1 : Coding of UTRAN Cell Identification Discriminator = 0000 



8 1 7 1 6 1 5 


4 1 3 1 2 1 1 


MCCdig2 


MCC dig 1 


MNCdig3 


MCC dig 3 


MNCdig2 


MNCdigl 


LAC 


LAC cont. 


3G Cell identity 


3G Cell identity cont. 


3G Cell identity cont. 


Spare 30 Cell identity cont. 



octet 4 
octet 5 
octet 6 
octet 7 
octet 8 
octet 9 
octet 1 
octet 1 1 
octet 12 



LAC, Location Area Code (2 octet field) 

This field is the binary representation of the Location Area Code, see 3GPP TS 23.003. The LAC field consists of 16 

bits. Bit 8 in octet 7 is the most significant bit and bit 1 in octet 8 is the least significant bit. 

The octets 9-12 are coded as shown in 3GPP TS 25.331, Table 'Cell identity'. 



1 1 .2.67 Serving GANG table indicator 

The purpose of the Serving GANC table indicator is to indicate to the mobile station if it is allowed to store 
information in the stored Serving GANC table after a successful registration. 



8 


7|6|5|4|3|2|1 






Serving GANC table indicator lEI 


octet 1 


Length of Serving GANC table indicator value contents 


octet 2 


Spare | SUTI 


octet 3 



Figure 11.2.67.1 Serving GANC table indicator information element 
Table 11.2.67.1: Serving GANC table indicator information element 



SUTI, Serving GANC table indicator indicator (octet 3) 

Bit 

1 

The MS is not allowed to store information in the stored Serving 

GANC table - "Do Not Store". 

1 The MS is allowed to store information in the stored Serving GANC 
table"Store". 



1 1 .2.68 Registration indicators 



The Registration indicators information element is used by the mobile station to indicate status information related to 
the registration request to the network. This information element is included only when attempting to register to the 
Default GANC. 



8 


7 1 6 1 5 1 4 1 3 1 2 


1 1 




1 Registration indicators IE! 


octet 1 


Length of Registration indicators contents 


octet 2 




Spare | 


MPS 


octet 3 



Figure 11.2.68.1 Registration indicators information element 
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Table 11.2.68.1: Registration indicators information element 



MPS, Manual PLMN Selection indicator (octet 3) 

Bit 

2 1 

The MS is in Automatic PLMN selection mode. 

1 The MS is in Manual PLMN selection mode and request the list 

of PLMN identities that may provide GAN service in the 
current location. 

1 The MS is in Manual PLMN selection mode and tries to register; 

no PLMN list is needed. 



11.2.69 GAN PLMN List 

The GAN PLMN List information element is used by the network to indicate possible PLMNs that may provide GAN 
service to the MS in its current location. The information element contains the PLMN identifier and the associated 
GANG and GANC-SEGW address information for each PLMN in the list. It may also contain PLMN specific GAN 
Service Zone Information. 



8 


7 


6 5 4 3 2 


1 




GAN PLMN List lEI 


ext 


Length of GAN PLMN List value contents 


Number of PLMNs 


PLMN information, PLMN 1 




PLMN information, PLMN n 



octet 1 
octet 2, 2a 
octet 3 
octet 4 



Figure 1 1 .2.69.1 : PLMN List information element 

The "Number of PLMNs" (octet 3) contains the number of PLMN information items in the list. Bit 8 of octet 3 is the 
most significant bit and bit 1 of octet 3 the least significant bit. 

Coding of PLMN information for each PLMN is the following: 



8 7 6 5 


4 3 2 1 


MOO digit 2 


MOO digit 1 


MNCdigitS 


MOO digit 3 


MNGdigit2 


MNC digit 1 


Spare GSZI 


GANC-ADDR | SEGW-ADDR 


GANC-SEGW Address information 


GANG Address information 


GAN Service Zone information 



octet x+1 
octet x+2 
octet x+3 
octet x+4 



Figure 11.2.69.2: PLMN information part of PLIUIN List information element 
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Table 1 1 .2.69.1 : PLMN information part of PLMN List information element 



MCC, Mobile country code (octet x+1 , octet x+2 bits 1 to 4) 
The IVICC field is coded as in ITU-T Rec. E212, Annex A. 

MNC, IVIobile network code (octet x+3, octet x+2 bits 5 to 8). 

Tlie coding of tills field is the responsibility of each administration but BCD coding shall 
be used. The MNC shall consist of 2 or 3 digits. For PCS 1900 for North America, 
Federal Regulation mandates that a 3-digit MNC shall be used. However a network 
operator may decide to use only two digits in the MNC over the radio interface. In this 
case, bits 5 to 8 of octet x+2 shall be coded as "1111 ". Mobile equipment shall accept 
MNC coded in such a way. 

SEGW-ADDR, GANC-SEGW address type indicator (octet x+4) 

Bits 

21 

GANC-SEGW Address Information for this PLMN is coded as IP-address. The 

format is as defined in sub-clause 1 1 .2.9, "IP Address" excluding the IP address 
lEI, but including Length Indicator, IP Address Type and Address Information. 

1 GANC-SEGW Address Information for this PLMN is coded as FQDN. The 

format is as defined in sub-clause 11.2.10, "Fully Qualified Domain/Host Name 
(FQDN)" excluding the FQDN lEI, but including Length Indicator and FQDN. 

GANC-ADDR, GANC address type indicator (octet x+4) 

Bits 

43 

GANC Address Information is coded as IP-address. The format is as defined in 

sub- 
clause 1 1 .2.9, "IP Address" excluding the IP address lEI, but including Length 
Indicator, IP Address Type and Address Information. 

1 GANC Address Information is coded as FQDN. The format is as defined in sub- 

clause 11.2.10, "Fully Qualified Domain/Host Name (FQDN)" excluding the FQDN 
lEI, but including Length Indicator and all characters of FQDN. 

GSZI, GAN Service Zone Information Indicator, (octet x +4) 

Bit 

5 

GAN Service Zone Information is not included for this PLMN. 

1 GAN Service Zone Information is included for this PLMN. 

GANC-SEGW Address information and GANC Address information for each PLMN are 
coded as defined by GANC-SEGW and GANC address type indicators (for each PLMN). 

GAN Service Zone Information is of variable length and the format is as defined in the 
sub-clause 1 1 .2.62, for the octets 3 to n (GAN Service Zone Icon Indicator, length of 
GAN Service Zone Name and GAN Service Zone Name). The inclusion of this field is 
optional for each PLMN and is defined by the GSZI bit. 



1 1 .2.70 Received Signal Level List 



The Received Signal Level List information element contains the received signal level for each cell. 

8 7 6 5 4 3 2 1 

octet 1 
octet 2 
octet 3 
octet 3 



Received Signal Level List lEI 


Length of Received Signal Level List value contents 


Spare 


RXLEV-NCELL 1 


Spare 


RXLEV-NCELL 2 



Spare 



RXLEV-NCELL n 



octet n+2 



Figure 1 1 .2.70.1 : Received Signai Levei List information element 
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Table 1 1 .2.70.1 : Received Signal Levei List information element 



RXLEV-NCELL i, Result of measurement on the i'th neighbour cell (octets 3 to n+2) 

If the i'th neighbour cell is a GSM cell, the RXLEV-NCELL field is coded as the binary 
representation of a value N. N corresponds according to the mapping defined in 
3GPP TS 45.008 to the received signal strength on the i'th neighbouring cell. 

If the i'th neighbour cell is a 3G cell, the contents of the RXLEV-NCELL field is defined 
in 3GPP TS 45.008. 

Range: to 63. 



1 1 .2.71 Required GAN Services 

The purpose of the Required GAN Services information element is to indicate to the GANC that the mobile station 
requires a GAN specific service and which of the GAN services the mobile station requires. 



8 


7 6 5 4 3 2 


1 


Required GAN Services lEI 


Length of Required GAN Services contents 


Spare 


CBS 



octet 1 
octet 2 
octet 3 



Figure 11.2.71.1: Required GAN Services information element 
Table 11.2.71.1: Required GAN Services information element 



CBS Cell Broacicast Service (octet 3) 

Bit 

1 

CBS is not required by the mobile station 

1 CBS is required by the mobile station. 



1 1 .2.72 Broadcast Container 

The Broadcast Container information element is used by the network to encapsulate Cell Broadcast information being 
passed to a mobile station. 



octet 1 
octet 2, 2a 
octet 3 
octet 4-91 



octet m- 
(m+87) 



Figure 11.2.72.1: Broac/casf Confa/ner information element 

The "Number of Broadcast Containers" (octet 3) contains the number of CBS Frames in the list. Bit 8 of octet 3 is the 
most significant bit and bit 1 of octet 3 the least significant bit. 

Coding of CBS Frame is the following: 



8 


7 


6 5 4 3 2 1 




Broadcast Container lEI 


xt 


Length of Broadcast Container value contents 


Number of CBS Frames 


CBS Frames 1 




CBS Frames n 
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8 


7 


6 5 4 3 


2 


1 


Page from a CBS Message MSB 




Page from a CBS Message LSB 



octet 

X.. .octet 

x+87 



Figure 11.2.72.2: CBS Frame part of Broadcast Container information element 

The coding of the page of the CBS message is defined in sub-clause 9.4.1 in TS 23.041. 

11.2.73 SGCell Identity 

The purpose of the 3G Cell Identity information element is to identify a cell within a PLMN. 
8 7 6 5 4 3 2 1 



3G Cell Identity lEI 



Length of 3G Cell Identity IE contents 



The rest of the IE is coded as in [TS 25.331] not including lEI and 
length, if present. 



octet 1 
octet 2 
octet 3 

octet n 



Figure 11.2.4.1 Ce// /denf/fy information element 



1 2 List of system parameters 



The information provided in sub-clauses 12.1 and 12.2 shall be treated as informative. The normative text is specified in 
the relevant sub-clauses and shall prevail. 

12.1 Timers and counters for unlicensed radio resource 
management 

12.1.1 Timers on the mobile station side 

All the timers listed below except TU3910 shall be stopped when the MS exits GAN mode. 
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Timer 


Start 


Stop 


At expiry 


Value Setting 


TU3901 


Sending of GA-RC 

DISCOVERY 

REQUEST 


Reception of GA-RC 
DISCOVERY ACCEPT or 
GA-RC DISCOVERY 
REJECT 


See sub-clause 5.6.1. 


30 seconds. 


TU3902 


Reception of GA-RC 
DISCOVERY 
REJECT with Reject 
Cause value 'network 
congestion' 




See sub-clause 5.6.3. 


Received from the GANC 
asTU3902TimerlE. 
Value in TU3902 Timer IE 
+ a random value between 
and the value in TU3902 
Timer IE 


TU3903 


TU3901 expiry 




See sub-clause 5.6.4. 


Initial value is 1 minute. 

Maximum value is 32 
minutes. 


TU3904 


Sending of GA-RC 

REGISTER 

REQUEST 


Reception of GA-RC 
REGISTER ACCEPT or 
GA-RC REGISTER 
REJECT or GA-RC 
REGISTER REDIRECT 


See sub-clause 6.2.4.1. 


30 seconds. 


TU3905 


TU3904 expiry or 
Lower layer failure or 
reception of GA-RC 
DEREGISTER 




See sub-clause 6.2.4.3. 


1 seconds. 


TU3906 


Reception of GA-RC 
REGISTER ACCEPT 
and at TU3906 expiry 




Send GA-RC KEEP ALIVE 
and restart TU3906 


Received from the GANC 
as TU3906 Timer IE. 


TU3907 


Reception of GA-RC 
REGISTER REJECT 
or GA-RC 
DEREGISTER with 
Reject Cause value 
'network congestion' 




See sub-clause 6.2.4.4. 


Received from the GANC 
asTU3907Timer IE. 
Value in TU3907 Timer IE 
+ a random value between 
and value in TU3907 
Timer IE 


TU3908 


Sending of GA-CSR 
REQUEST 


Reception of GA-CSR 
REQUEST ACCEPT or 
GA-CSR REQUEST 
REJECT 


See sub-clause 7.1.4.1. 


5 seconds. 


TU3910 


At rove out 


When IVIS detects loss of 
GERAN coverage 


The MS is allowed to rove- 
in 


Received from the GANC 
asTU3910TimerlE. 


TU3920 


Sending of GA-CSR 

HANDOVER 

ACCESS 


Reception of GA-CSR 
ACTIVATE CHANNEL 
COMPLETE 


See sub-clause 7.7.5. 


Received from the GANC 
as TU3920 Timer IE. 


TU4001 


Reception of GA- 
PSR- ACTIVATE- 
UTC- ACK or at 
sending or receiving 
of GA-PSR- 
UNITDATA 


Sending or receiving of 
GA-PSR-UNITDATA (and 
restart the timer) 


See sub-clause 8.4.1 


Received from the GANC 
asTU4001 Timer IE. 


TU4002 


Sending of GA-PSR- 
ACTIVATE-UTC- 
REQ or sending GA- 
PSR-DEACTIVATE- 
UTC-REQ 


Reception of GA-PSR- 
ACTIVATE-UTC-ACK or 
reception of GA-PSR- 
DEACTIVATE-UTC-ACK 


See sub-clause 8.2.4.2 and 
sub-clause 8.4.4.1 


5 seconds. 


TU4003 


Sending of GA-PSR- 
DFC-REQ 


-. 


See sub-clause 8.11.3 


Received from the GANC 
as TU4003 Timer IE. 



12.1.2 Timers on the network side 

No timers are defined on the network side in this version of this specification. 
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1 2.2 Other system parameters 

12.2.1 TCP related parameters and system parameters 

TCP port for Discovery is port number 14001. 

TCP port for Registration is port number 14001. 

The MS should ensure that the small packets containing each signalling message are sent immediately. For example, 
this can be done by using the standard TCP socket options (e.g., TCP_NODELAY to disable Nagle's algorithm). 

The MS shall not normally release the TCP connection to the GANC, while it is registered with a GANC. 

Once the TCP connection is released, the IPsec tunnel can also be released unless this tunnel will be used for 
subsequent registration. 

1 2.2.2 Derivation of tine FQDN 

The home network realm shall be in the form of an Internet domain name, e.g. operator.com, as specified in 
RFC 1035 [19]. 

When attempting to derive the FQDN of the home network domain name from the IMSl as described in the following 
steps: 

1. take the first 5 or 6 digits, depending on whether a 2 or 3 digit MNC is used (see 3GPP TS 31.102 [27]) and 
separate them into MCC and MNC; if the MNC is 2 digits then a zero shall be added at the beginning; 

2. use the MCC and MNC derived in step 1 to create the "mnc<MNC>.mcc<MCC>. 3gppnetwork.org" domain 
name; 

3. add the label "gan." to the beginning of the domain name. 
An example of a GAN NAI realm is: 

IMSI in use: 234150999999999; 
Where: 

MCC = 234; 
MNC = 15; 
MSIN = 0999999999 
Which gives the home network domain name: gan.mnc015.mcc234.3gppnetwork.org. 



12.2.3 MS system parameters 



Parameter Name 


Value 


Up Register Max Retries 


3 


Up Connect Attempt Count 


3 


AP Black list size minimum 


1 


Location Black List size minimum 


1 



Parameter Name 


Initial Value 


Serving GANC Table indicator 


'Do Not Store' 
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Annex A (informative): 

RTP Framing for CS-domain Services 

A.1 RFC 3267 Framing 

RFC 3267 defines the RTP payload format for AMR and AMR-WB codecs. There are two operation modes for the 
payload format referred to as: bandwidth-efficient mode and octet-aligned mode. Only octet-aligned mode is applicable 
to GAN. 

A.1 .1 RFC 3267 Framing Parameters for GAN (Normative) 

When carrying AMR or AMR-WB voice in GAN, the following RTP framing parameters shall be used: 

Octet-aligned 

- No frame CRCs 

No robust sorting 

No frame interleaving 

Single channel per session 

Mode-change-period = 2 i.e. mode can change every 2nd speech frame 

Mode-change-neighbor = 1 i.e. mode can only change to neighbouring mode in the active mode set 

Mode-set: signalled in Multirate Configuration IE 

Forward error correction: single or double retransmission of the previously transmitted frame (s) (i.e. window 
size of 2 or 3). To request a concurrent AMR and redundancy mode adaptation, the decoder (speech receiver) 
signals the encoder (speech sender) the new AMR mode it prefers in Codec Mode Request (CMR). The 
redundancy mode for each mode of the Active Codec Set is signaled in the Redundancy Configuration IE. This 
way the preferred redundancy mode is also implicitly requested with the CMR. (Triple redundancy is not used, 
as it would add too much network load. When the third redundant frame has to be used, there would also be too 
long delays.) 

The frame loss rate for the received speech data is continuously monitored by the MS and the network. If the sender is 
currently using codec mode N where increasing N means a codec mode with higher bitrate, the following applies. 

When the frame loss rate goes above Threshold N-1, the receiver signals the sender to change to codec mode N- 
1 and thereby also to the redundancy mode associated with codec mode N-1. 

When the frame loss rate goes below Threshold N - Hysteresis N, the receiver signals the sender to change to 
codec mode Nh-1 and thereby also to the redundancy mode associated with codec mode Nh-1. 

The initial codec mode, and associated redundancy mode, to use, is signaled in Multirate Configuration IE, at channel 
activation or at channel mode modify. 
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A.1 .1 a Codec and Redundancy Mode Example (Informative) 



C0DEG_M0DE_3 
No redundancy 

C0DEG_M0DE_2 
Single Reundancy 

C0DEG_M0DE_1 
Double Redundancy 



FLR 



THR_2 - HYST_2 
THR_2 

THR_1 - HYST_1 
THR 1 



Figure A1 .1a.1 : Codec and Redundancy Mode example 

The receiver is currently using Codec Mode 3 with no redundancy. 

If the frame loss rate increases over Threshold 2, then the receiver indicates this to the sender by requesting an AMR 
mode for which single redundancy is used (as signaled in the Redundancy Configuration IE). This configuration is kept 
until frame loss rate is again lower than Threshold 2 - Hysteresis 2. The receiver indicates this by again requesting a 
higher AMR mode. By this redundancy mode is also implicitly requested to be no redundancy. 

If instead network conditions degrade even more and frame loss rate increases over Threshold 1, the receiver indicates 
this to sender by requesting an AMR mode for which double redundancy is used (as signaled in the Redundancy 
Configuration IE). The sender then switches to double redundancy and the requested AMR mode. This configuration is 
kept until frame success rate is again better than Threshold 1 - Hysteresis 1 . The receiver indicates this by again 
requesting a higher AMR mode. By this redundancy mode is also implicitly requested to be single redundancy. 

A.1 .2 RFC 3267 Octet-aligned Frame Examples (Informative) 

With RFC 3267 the RTF payload begins with a Codec Mode Request (CMR) field, followed by a number of Table of 
Content (ToC) entries, and speech data representing one or more speech frame-blocks. In octet-aligned mode, the CMR 
and ToC fields are padded to an octet. The following diagram shows the general payload format layout: 

12 3 
01234567890123456789012345678901 

1 CMR |R|R|R|R|F| FT |Q|P|P|F| FT |Q|P|P| speech data | 

ToC ToC 
I < > I < > I 

CMR (Codec Mode Request): is used for rate adaptation. The value of the CMR field is set to the frame type index of 
the corresponding speech mode being requested. The frame type index may be 0-7 for AMR, or 0-8 for AMR-WB, as 
defined in [RFC3267]. CMR value 15 indicates that no mode request is present, and other values are for future use. 

FT (Frame Type index): indicates either the AMR or AMR-WB speech coding mode or comfort noise (SID) mode of 
the corresponding frame carried in this payload. E.g. in case of AMR speech, a value of FT=7 indicates that this frame 
carries AMR 12.2 sample(s). 

Q (frame Quality indicator): if set to 0, indicates that the corresponding frame is severely damaged. 

The F bit indicates whether another speech frame follows in the same payload (F=l) or if this frame is the last frame in 
the payload (F=0). 

R and P stand for reserved and padding bits, respectively. 

The following diagram shows an octet-aligned AMR payload carrying one AMR 12.2 speech frame-block: 
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12 3 
01234567890123456789012345678901 

1 CMR=15 |R|R|R|R| I FT=7 |Q|P|P| fl(0..7) | fl(8..15) | 
I fl (16. .23) I ... . I 

I I 

I I 

I I 

I I 

I I 

I I fl(232..239) I 
I fl (243) IP IP IP |P| 

The following diagram shows an octet-aligned AMR payload carrying two AMR 12.2 speech frame-blocks: 

12 3 
01234567890123456789012345678901 

1 CMR=15 |R|R|R|R| 1 I FT=7 |Q|P|P|0| FT=7 |Q|P|P| fl(0..7)| 
I fl (8. .15) I fl (16. .23) I . . . . I 
I I 
I I 
I I 
I I 
I I 
I I 
I fl(232..239) I fl (243) IP IP IP IP I f2(0..7) | f2(8..15) | 

I I 

I I 

I I 

I I 

I I 

I I 

I I fl(232..239) I 
I f2 (243) IP IP IP IP I 

NOTE: The last octet in both speech frames is padded with ftiur Os to make it octet-aligned. 
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The following diagram shows an octet-aligned AMR payload carrying one AMR 12.2 speech frame-block (FT=7) and 
one AMR SID frame (FT=8; 39 bits): 

12 3 
01234567890123456789012345678901 

1 CMR=15 |R|R|R|R| 1 I FT=7 |Q|P|P|0| FT=8 |Q|P|P| fl(0..7)| 
I fl (8. .15) I fl (16. .23) I . . . . I 
I I 
I I 
I I 
I I 
I I 
I I 
I fl(232..239) I fl (243) IP IP IP IP I f2(0..7) | f2(8..15) | 
I f2(16..23) I f2(24..31) | f2(32..38) |P| 



A.2 (HS)CSD Framing over RTP 



For radio interface rate of 3.6 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 72-bit frame 
every 20 ms. For transmission in RTP, this 72-bit frame is packed into a 9 octet payload. The format of this 72-bit frame 
is defined in [13]. 

For radio interface rate of 6 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 120-bit frame 
every 20 ms. For transmission in RTP, this 120-bit frame is packed into a 15 octet payload. The format of this 120-bit 
frame is defined in [13]. 

For radio interface rate of 12 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 240-bit frame 
every 20 ms. For transmission in RTP, this 240-bit frame is packed into a 30 octet payload. The format of this 240-bit 
frame is defined in [13]. 

For radio interface rate of 14.5 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 290-bit frame 
every 20 ms. For transmission in RTP, this 290-bit frame is packed into a 37 octet payload beginning with a 6-bit 
signature (binary 001 100),. The format of this 290-bit frame is defined in [13]. 

For radio interface rate of 29 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 580-bit frame 
every 20 ms. For transmission in RTP, this 580-bit frame is packed into a 73 octet payload beginning with a 4-bit 
signature (binary 1100),. The format of this 580-bit frame is defined in [13]. 

For radio interface rate of 43.5 kbps, the Terminal Adaptation FGANCtion (TAF) in the MS produces a 870-bit frame 
every 20 ms. For transmission in RTP, this 870-bit frame is packed into a 109 octet payload beginning with a 2-bit 
signature (binary 01),. The format of this 870-bit frame is defined in [13]. 

Radio interface rate of 32kbps is FFS. 
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Annex B (informative): 
Network QoS 

B.1 Introduction 

The GAN-MS should check DSCP/ToS information in incoming IP packets from the GANG and if different from what 
currently used, copy received DSCP/ToS and use it for outgoing IP packets. 

For a tunnel mode SA, there is an "outer" IP header that specifies the IPsec processing destination, plus an "inner" IP 
header that specifies the ultimate destination for the packet. 



B.2 Network behaviour 

When the GANG-SEGW receives an IP packet from the GANG, it should make sure that the DSGP (DiffServ Gode 
Point) values from the 'inner' IP header are mapped to the 'outer' IP header (according to operator configuration) before 
forwarding the packet to the MS using the established SA. When several flows are using the same IPsec tunnel and have 
a different QoS, e.g. a PS streaming class flow and a PS background flow, the GANG may decide to assign a specific 
DSGP value for each flow identified by its Packet Flow Identifier. 



B.3 IVIS behaviour 

B.3.1 Receiving of data 
B. 3.1.1 Outer IP packet 

When the MS receives an encrypted IP packet, it should store the DSGP value from the 'outer' IP header in the context 
of this IPSec SA for this inner DSGP value. 

B.3.1. 2 Inner IP packet 

Furthermore, the MS should perform the following actions when handling the received IP packet and UDP datagram or 
TGP data in the application layer (i.e. GA-GSR or GA-PSR layers): 

For a received RTP/UDP packet, read the DSGP value from the 'inner' IP header (i.e. using the UDP socket for 
the traffic channel). If this value is different from what is currently being used for this RTP/UDP stream, then 
save the received DSGP value and use it for all outgoing RTP/UDP packets for this traffic channel (one way to 
achieve this is to set the DSGP value for the UDP socket). 

For a received GA-PSR-UNITDATA message, read the DSGP value from the 'inner' IP header. If this value is 
different from what is currently being used for this flow within the GA-PSR TG, then save the received DSGP 
value and use it for all outgoing GA-PSR-UNITDATA messages on this flow within the GA-PSR TG. 

For a received GA-GSR message or GA-PSR message containing signalling or SMS, read the DSGP value from 
the 'inner' IP header (i.e. using the TGP socket for the TGP connection to the GANG). If this value is different 
from what is currently being used for this TGP connection, then save the received DSGP value and use it for all 
outgoing GA-GSR messages and GA-PSR messages containing signalling or SMS (one way to achieve this is to 
set the DSGP value for the TGP socket). 
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B.3.2 Sending of data 



When the MS is sending an IP packet to the GANG, it should make sure that the DSGP (DiffServ Gode Point) values 
for the 'inner' IP header are computed from the received IP packets, as described in B. 3. 1.2 above. Further, the DSGP 
value for the 'outer' IP header is obtained from the stored value in the IPSec SA context for this inner DSGP value, as 
described in B.3.1.1 above, before forwarding the packet to the GANG-SEGW using the established SA. 
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Annex C (normative): 

(Source-RAT) Measurement Report for Handover and Cell 

Change Order to GAN 

C.1 Measurement Report for Handover and Cell Change 
Order to GAN 

The MS uses the (Source-RAT) measurement report procedure to "request" handover to GAN for voice call or 
signalling session. It also uses it to "request" a Cell Change Order to GAN for packet data session. 

The procedure is initiated after GAN-RC has successfully registered with GANC, provided the following conditions are 

met: 

- the GAN-RC stays registered with GANC; 

if the source RAT is GERAN/UTRAN, and the MS is either in dedicated mode (signalling only or speech mode), 
network has requested reports according to NETWORK_CONTROL_ORDER or in DTM mode (simultaneous 
dedicated mode and packet transfer mode); 

- the ARFCN provided by GAN-RC (i.e. the GAN-ARFCN) is within the cell info hst used for measurement 
reporting in the source RAT; 

- no GSM neighbour cell matching the {GAN-ARFCN, GAN-BSIC} couple has been detected. 

The RR entity in the source RAT shall report that the cell associated with the {GAN-ARFCN, GAN-BSIC} couple has 
the best possible receiving level (i.e., RxLev = 63). 
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